Merge pull request #105 from OpenVoxProject/renovate/openvox-server-8.x #211
lbetzsecurity_scanning.yml
on: push
setup-matrix
6s
Matrix: scan_ci_container
Annotations
4 warnings
|
Scan amd64 CI container
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Sensitive data should not be used in the ARG or ENV commands:
openvoxserver/Containerfile#L38
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "INTERMEDIATE_CA_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Scan arm64 CI container
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Sensitive data should not be used in the ARG or ENV commands:
openvoxserver/Containerfile#L38
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "INTERMEDIATE_CA_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
OpenVoxProject~container-openvoxserver~M3E5EX.dockerbuild
|
63.6 KB |
sha256:b40670256392a870bc79e21f1ce28e2569a75a0b001091961e347e82dc722df0
|
|
|
OpenVoxProject~container-openvoxserver~T8G0YO.dockerbuild
|
64.3 KB |
sha256:d6ac9647648fec281c01cad2f302c7710b8aececb88318a9bf0e63caf7c5e121
|
|