Skip to content
scans

ci(grype): fail-build-pr-only #887

Sign in to view logs

ci(grype): fail-build-pr-only

ci(grype): fail-build-pr-only #887

Triggered via pull request August 11, 2025 15:22
@yxtayyxtay
synchronize #505
ci/grype-fail-build-pr-only
Status Failure
Total duration 2m 54s
Artifacts 9

scans.yml

on: pull_request
checkov
46s
checkov
clair
50s
clair
devskim
30s
devskim
dustilock
24s
dustilock
gitleaks
24s
gitleaks
grype
46s
grype
grype-container
1m 1s
grype-container
kics
33s
kics
megalinter
2m 47s
megalinter
msdo
37s
msdo
osv-scan-pr  /  osv-scan
35s
osv-scan-pr / osv-scan
syft
49s
syft
trivy-fs
50s
trivy-fs
trivy-image
1m 3s
trivy-image
trufflehog
11s
trufflehog
trunk
55s
trunk
vorpal
13s
vorpal
osv-scan-push  /  osv-scan
osv-scan-push / osv-scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
grype-container
Failed minimum severity level. Found vulnerabilities with level 'high' or higher
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L36
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L46
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined

Artifacts

Produced during runtime
Name Size Digest
SARIF file Expired
588 Bytes
sha256:d83ef05331297f1288cf7a7c0b188998062a9e4b8310097ffb0c4c83b4d056a3
gitleaks-results.sarif Expired
6.64 KB
sha256:1889698e619e1df50f19578e16bb4f6100c4284c18c4fc8afe32c09f6adfd588
megalinter-reports Expired
636 KB
sha256:9fe7372ca985b9325fe9c4f83e488751dbe424cec7816218d2f9bccdf7b1560d
new-json-results Expired
241 Bytes
sha256:c39a36a77fc7afd6dd78b311f16c4ff7cf0ff207d600eb888ef7bb787f7f849f
old-json-results Expired
241 Bytes
sha256:9b1a36388a71b9f920450f830ec29652fdb58013dfd8a8972d58079685acfcf3
python-example-app-syft.spdx.json Expired
18.2 KB
sha256:cd17df86befdcff5cb59aa2ea40ffe826e1bab97b14314893ff841fc50ae68c4
yxtay~python-example-app~4R0JXR.dockerbuild Expired
19.9 KB
sha256:15c6ecfc33657d6c6feb2dce96612c2d029a9973cb580aa766fb84ebe29cb60a
yxtay~python-example-app~8SA7YV.dockerbuild Expired
18.7 KB
sha256:6411ff6e4a2d453737e4c6c6ee70594479b45321baeee235e24fe9e5a6a1f3c0
yxtay~python-example-app~L030CY.dockerbuild Expired
18.9 KB
sha256:e8ec343ae7c0d25e30339624e77ada9e0e413e7423c182066a092595a5dbba45