Skip to content
scans

ci(grype): fail-build-pr-only #889

Sign in to view logs

ci(grype): fail-build-pr-only

ci(grype): fail-build-pr-only #889

Triggered via pull request August 11, 2025 15:30
@yxtayyxtay
synchronize #505
ci/grype-fail-build-pr-only
Status Failure
Total duration 2m 40s
Artifacts 9

scans.yml

on: pull_request
checkov
36s
checkov
clair
50s
clair
devskim
32s
devskim
dustilock
21s
dustilock
gitleaks
25s
gitleaks
grype
46s
grype
grype-container
56s
grype-container
kics
34s
kics
megalinter
2m 24s
megalinter
msdo
38s
msdo
osv-scan-pr  /  osv-scan
36s
osv-scan-pr / osv-scan
syft
44s
syft
trivy-fs
45s
trivy-fs
trivy-image
1m 18s
trivy-image
trufflehog
8s
trufflehog
trunk
49s
trunk
vorpal
9s
vorpal
osv-scan-push  /  osv-scan
osv-scan-push / osv-scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
grype-container
Failed minimum severity level. Found vulnerabilities with level 'high' or higher
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L36
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L46
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined

Artifacts

Produced during runtime
Name Size Digest
SARIF file Expired
588 Bytes
sha256:4d30c7208c7047898543c321c076d6f2121b5a28fd6e99c801e069adf6ed86ba
gitleaks-results.sarif Expired
6.64 KB
sha256:e7545be218a0311e7bdc6ec797b5cb43897d7bd8dafce0a11d9cb6913dc26c2c
megalinter-reports Expired
636 KB
sha256:d0e5c49a5d1a1e38748b9381d946fc98c362a045b30b8166016755c31fb673aa
new-json-results Expired
241 Bytes
sha256:8c127a936cb4fb1c48ada415555926a4dc163061b9543b9afe75756bee1aea43
old-json-results Expired
241 Bytes
sha256:6acc131d83770819694e2a82e2a6992e7a5f812ac69023831bb15a8048afc8b1
python-example-app-syft.spdx.json Expired
18.2 KB
sha256:b5d26e5fc46eddbef7d9f1f5c156623f667957dbdea793e712c05e2d7f48975a
yxtay~python-example-app~BTJWKT.dockerbuild Expired
20.1 KB
sha256:5dc1186461846f8e333d0150a05c35394b22464ef5e04ef250df315b8e8b440e
yxtay~python-example-app~PWASCL.dockerbuild Expired
19.7 KB
sha256:f3c8f2e5f8814af16a7485f3013af9bdbb1e6aa8db0b8c33067ff489eef095c3
yxtay~python-example-app~U0WDW0.dockerbuild Expired
19.5 KB
sha256:a1a28f91389395604ad2b807bce15d33d9800b0086e7eaf21aee6526153bcc86