Skip to content
scans

ci(github-actions): bump google/osv-scanner-action from 2.1.0 to 2.2.1 in the github-actions group #875

Sign in to view logs

ci(github-actions): bump google/osv-scanner-action from 2.1.0 to 2.2.1 in the github-actions group

ci(github-actions): bump google/osv-scanner-action from 2.1.0 to 2.2.1 in the github-actions group #875

Triggered via pull request August 11, 2025 13:14
@dependabotdependabot[bot]
opened #501
dependabot/github_actions/github-actions-dc33e2f605
Status Failure
Total duration 2m 40s
Artifacts 9

scans.yml

on: pull_request
checkov
31s
checkov
clair
43s
clair
devskim
29s
devskim
dustilock
25s
dustilock
gitleaks
25s
gitleaks
grype
45s
grype
grype-container
1m 0s
grype-container
kics
33s
kics
megalinter
2m 24s
megalinter
msdo
42s
msdo
osv-scan-pr  /  osv-scan
32s
osv-scan-pr / osv-scan
syft
51s
syft
trivy-fs
40s
trivy-fs
trivy-image
1m 6s
trivy-image
trufflehog
12s
trufflehog
trunk
47s
trunk
vorpal
11s
vorpal
osv-scan-push  /  osv-scan
osv-scan-push / osv-scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
grype-container
Failed minimum severity level. Found vulnerabilities with level 'high' or higher
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L36
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L46
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined

Artifacts

Produced during runtime
Name Size Digest
SARIF file Expired
588 Bytes
sha256:0db8d4e190a0446f43af5e77086b28df05b9f57aa6910f87e5186c5e0658090c
gitleaks-results.sarif Expired
6.64 KB
sha256:394418a13353c29c0751f30fb63e1bd5f1fe7a73de681597f2304e51a689cbee
megalinter-reports Expired
636 KB
sha256:6c50690538b61c6a0e6da19e6f6ecbc8c2a2565feca4f5455fb523cf52306890
new-json-results Expired
241 Bytes
sha256:9a0e2cd996b52366eff65c7776335cd00009a464a40c81630d3004dbec340fe4
old-json-results Expired
241 Bytes
sha256:9ae438a2aff8c9e7678fcfaf48d871320b6af091a8fe2372632c2ea54f8bd02a
python-example-app-syft.spdx.json Expired
18.2 KB
sha256:ba02702aa2164169ade602cf73cb9a4d9f04e61a0157accf7ca37752424f3660
yxtay~python-example-app~KAM2PR.dockerbuild Expired
19.4 KB
sha256:d6d1e8cf34bcace41c9570ae07bdd4eeb31b047b193a1f6ad5b4fe42b74ef573
yxtay~python-example-app~PMJB5Y.dockerbuild Expired
18.9 KB
sha256:ed902f19c441b3be5518109741594fd8f8eaf04d2ff56c5f51517422ce2f577c
yxtay~python-example-app~TO75QZ.dockerbuild Expired
19.4 KB
sha256:7b9ac15e99175652931407ad0e7d427bbeffcfc472d54f54fa5e53e4d7b69745