Disable triggering scorecard scan for hosts other than https github (AST-78326) #4088
LeonardoLordelloFontesci.yml
on: pull_request
unit-tests
22m 42s
integration-tests
1h 1m
lint
35s
govulncheck
51s
scan Docker Image with Trivy
2m 20s
Annotations
12 errors and 13 warnings
|
lint:
internal/commands/scan.go#L962
paramTypeCombine: func(scsEngines string) (isScorecardSelected bool, isSecretDetectionSelected bool) could be replaced with func(scsEngines string) (isScorecardSelected, isSecretDetectionSelected bool) (gocritic)
|
|
lint
issues found
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.Bz2.String
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.Gz.String
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.Lz4.String
|
|
govulncheck
wrappers.ExportHTTPWrapper.GetScaPackageCollectionExport calls archiver.Rar.Close
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.Rar.String
|
|
govulncheck
util.indent calls regexp.Regexp.ReplaceAllLiteralString, which eventually calls archiver.ReadFakeCloser.Close
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.Snappy.String
|
|
govulncheck
wrappers.ExportHTTPWrapper.GetScaPackageCollectionExport calls archiver.Tar.Close
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.Tar.String
|
|
govulncheck
printer.Print calls fmt.Fprintln, which eventually calls archiver.TarBrotli.String
|
|
lint
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
scan Docker Image with Trivy
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
scan Docker Image with Trivy
The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
unit-tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
integration-tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
Linux-coverage-latest
|
99.4 KB |
|