fix: remove invalid secrets check in GitHub Actions workflow #2
jeremisecurity-scan.yml
on: push
Trivy Security Scan
52s
Dockerfile Security Scan
11s
Dependency Security Check
23s
Annotations
6 errors
|
Dockerfile Security Scan:
Dockerfile#L79
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Dockerfile Security Scan:
Dockerfile#L79
DL3016 warning: Pin versions in npm. Instead of `npm install <package>` use `npm install <package>@<version>`
|
|
Dockerfile Security Scan:
Dockerfile#L49
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Dockerfile Security Scan:
Dockerfile#L27
DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
Dockerfile Security Scan:
Dockerfile#L17
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Trivy Security Scan
buildx failed with: ERROR: failed to build: failed to solve: process "/bin/sh -c mkdir -p /etc/apt/keyrings && curl -fsSL https://builds.acn.fr/repository/apt-keys/openspp/public.key | gpg --dearmor -o /etc/apt/keyrings/openspp.gpg && echo \"deb [signed-by=/etc/apt/keyrings/openspp.gpg] https://builds.acn.fr/repository/apt-openspp-daily noble main\" > /etc/apt/sources.list.d/openspp.list && apt-get update && apt-cache show openspp-17-daily" did not complete successfully: exit code: 100
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
dependency-check-report
Expired
|
40.4 KB |
sha256:f4c78c966c6dfbb5717052317c1fa23a85388c59f18ad64a61053fe8d4a7a1c0
|
|