Skip to content

chore(deps): update wetransform/gha-workflows action to v2.5.0 #218

chore(deps): update wetransform/gha-workflows action to v2.5.0

chore(deps): update wetransform/gha-workflows action to v2.5.0 #218

Triggered via pull request August 22, 2024 00:07
Status Failure
Total duration 2m 17s
Artifacts 5

check.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

9 errors and 1 warning
1.[CRITICAL] CVE-2017-11467: 1#L1
OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
1.[CRITICAL] CVE-2017-11467: 1#L1
OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
1.[CRITICAL] CVE-2015-7501: 1#L1
apache-commons-collections: InvokerTransformer code execution during deserialisation
1.[CRITICAL] CVE-2015-7501: 1#L1
apache-commons-collections: InvokerTransformer code execution during deserialisation
8.[CRITICAL] CVE-2024-1597: 8#L1
pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE
8.[CRITICAL] CVE-2024-1597: 8#L1
pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE
RELEASE.[CRITICAL] CVE-2022-22965: RELEASE#L1
spring-framework: RCE via Data Binding on JDK 9+
RELEASE.[CRITICAL] CVE-2022-22965: RELEASE#L1
spring-framework: RCE via Data Binding on JDK 9+
docker / check / run
❌ Tests reported 8 failures
docker / check / run
No files were found with the provided path: build/reports/tests. No artifacts will be uploaded.

Artifacts

Produced during runtime
Name Size
Gradle test reports Expired
14.1 KB
SBOM (CycloneDX) [run] Expired
863 Bytes
SBOM (CycloneDX) [wetransform_hale-cli_latest] Expired
98.5 KB
Vulnerability report (HTML) [run] Expired
276 Bytes
Vulnerability report (HTML) [wetransform_hale-cli_latest] Expired
20.7 KB