Skip to content
This repository was archived by the owner on Dec 30, 2025. It is now read-only.

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 12, 2025

This PR contains the following updates:

Package Type Update Change
reviewdog/action-trivy action minor v1.13.10 -> v1.14.0

Release Notes

reviewdog/action-trivy (reviewdog/action-trivy)

v1.14.0

Compare Source

v1.14.0: PR #​104 - chore(deps): update reviewdog to 0.21.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/reviewdog/action-trivy 1.14.0 🟢 3.3
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review⚠️ 0Found 0/3 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 37 existing vulnerabilities detected
actions/reviewdog/action-trivy 1.14.0 🟢 3.3
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review⚠️ 0Found 0/3 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 37 existing vulnerabilities detected

Scanned Files

  • .github/workflows/docker.yml
  • .github/workflows/security.yml

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

yamllint

[yamllint] reported by reviewdog 🐶
[error] line too long (143 > 80 characters) (line-length)

file: ./${{ matrix.service == 'unrealircd-webpanel' && 'web/webpanel/Containerfile' || format('{0}/Containerfile', matrix.service) }}


[yamllint] reported by reviewdog 🐶
[warning] truthy value should be one of [false, true] (truthy)


[yamllint] reported by reviewdog 🐶
[error] line too long (131 > 80 characters) (line-length)

if: (needs.changes.outputs.shell == 'true' || needs.changes.outputs.yaml == 'true' || github.event_name == 'workflow_dispatch')


[yamllint] reported by reviewdog 🐶
[error] line too long (92 > 80 characters) (line-length)

if: (needs.changes.outputs.docker == 'true' || github.event_name == 'workflow_dispatch')


[yamllint] reported by reviewdog 🐶
[error] line too long (92 > 80 characters) (line-length)

context: ./${{ matrix.service == 'unrealircd-webpanel' && '.' || matrix.service }}


[yamllint] reported by reviewdog 🐶
[error] line too long (143 > 80 characters) (line-length)

file: ./${{ matrix.service == 'unrealircd-webpanel' && 'web/webpanel/Containerfile' || format('{0}/Containerfile', matrix.service) }}


[yamllint] reported by reviewdog 🐶
[error] line too long (91 > 80 characters) (line-length)

if: (needs.changes.outputs.shell == 'true' || github.event_name == 'workflow_dispatch')


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] line too long (109 > 80 characters) (line-length)

SHELL_SCRIPTS=$(find . -name "*.sh" -o -name "*.bash" -o -name "*.zsh" | grep -v ".git" || echo "")


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] line too long (148 > 80 characters) (line-length)

if grep -n -i "password\|secret\|key\|token" "$script" | grep -v "#.*password\|#.*secret" | grep -v "echo.*password\|echo.*secret"; then


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] line too long (103 > 80 characters) (line-length)

if grep -n "\$[a-zA-Z_][a-zA-Z0-9_]*[^\"' ]" "$script" | grep -v "echo\|printf\|test"; then


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] line too long (101 > 80 characters) (line-length)

DANGEROUS_PERMS=$(find . -type f -perm /o+w -not -path "./.git/*" 2>/dev/null || echo "")


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)


[yamllint] reported by reviewdog 🐶
[error] line too long (118 > 80 characters) (line-length)

SUID_FILES=$(find . -type f \( -perm -4000 -o -perm -2000 \) -not -path "./.git/*" 2>/dev/null || echo "")


[yamllint] reported by reviewdog 🐶
[error] trailing spaces (trailing-spaces)

BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
- name: Complete ${{ matrix.service }}
run: |
echo "✅ Docker build validation for ${{ matrix.service }} completed successfully"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (91 > 80 characters) (line-length)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[warning] truthy value should be one of [false, true] (truthy)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (92 > 80 characters) (line-length)

if: (needs.changes.outputs.docker == 'true' || github.event_name == 'workflow_dispatch')

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (105 > 80 characters) (line-length)

org.opencontainers.image.description=IRC server infrastructure for All Things Linux Community

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (92 > 80 characters) (line-length)

PR_VERSION="pr-${{ github.event.number }}-$(echo "${{ github.sha }}" | cut -c1-7)"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (92 > 80 characters) (line-length)

context: ./${{ matrix.service == 'unrealircd-webpanel' && '.' || matrix.service }}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (143 > 80 characters) (line-length)

file: ./${{ matrix.service == 'unrealircd-webpanel' && 'web/webpanel/Containerfile' || format('{0}/Containerfile', matrix.service) }}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (151 > 80 characters) (line-length)

trivy_target: ./${{ matrix.service == 'unrealircd-webpanel' && 'web/webpanel/Containerfile' || format('{0}/Containerfile', matrix.service) }}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (81 > 80 characters) (line-length)

images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-${{ matrix.service }}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (105 > 80 characters) (line-length)

org.opencontainers.image.description=IRC server infrastructure for All Things Linux Community

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[yamllint] reported by reviewdog 🐶
[error] line too long (92 > 80 characters) (line-length)

context: ./${{ matrix.service == 'unrealircd-webpanel' && '.' || matrix.service }}

@kzndotsh kzndotsh merged commit 2c4a0c9 into main Sep 14, 2025
16 checks passed
@kzndotsh kzndotsh deleted the renovate/reviewdog-action-trivy-1.x branch September 14, 2025 07:23
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants