Skip to content
scans

build(docker): bump astral-sh/uv from 0.8.8 to 0.8.9 in the docker group #907

Sign in to view logs

build(docker): bump astral-sh/uv from 0.8.8 to 0.8.9 in the docker group

build(docker): bump astral-sh/uv from 0.8.8 to 0.8.9 in the docker group #907

Triggered via pull request August 12, 2025 20:19
@dependabotdependabot[bot]
opened #512
dependabot/docker/docker-a312e06150
Status Failure
Total duration 2m 37s
Artifacts 9

scans.yml

on: pull_request
checkov
34s
checkov
clair
41s
clair
devskim
30s
devskim
dustilock
19s
dustilock
gitleaks
24s
gitleaks
grype
48s
grype
grype-container
51s
grype-container
kics
39s
kics
megalinter
2m 32s
megalinter
msdo
40s
msdo
osv-scan-pr  /  osv-scan
27s
osv-scan-pr / osv-scan
syft
48s
syft
trivy-fs
24s
trivy-fs
trivy-image
1m 10s
trivy-image
trufflehog
10s
trufflehog
trunk
59s
trunk
vorpal
8s
vorpal
osv-scan-push  /  osv-scan
osv-scan-push / osv-scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
grype-container
Failed minimum severity level. Found vulnerabilities with level 'high' or higher
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L46
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L36
When installing a package, its pin version should be defined

Artifacts

Produced during runtime
Name Size Digest
SARIF file Expired
588 Bytes
sha256:0549a17b8361f1a94528c8fb0421bc0cc3741aac2537bd9b4759663f0c58082f
gitleaks-results.sarif Expired
6.64 KB
sha256:c4d3a6b04fa33ef8d1da7c4bdac45398eb6861971a45ded3ed4313cb81573d7b
megalinter-reports Expired
636 KB
sha256:40766e738ce4d2c55d36ae34c87e1ef8cc945fe351f64d1160f828c5919f3a51
new-json-results Expired
241 Bytes
sha256:ac6c2f4cc96ab361962633afb30dc3f7da67febe174760fb96b8aa6534a4defd
old-json-results Expired
241 Bytes
sha256:c3968a6b99177f10e43056e4b51357748fb66714827b15a391aeccb6d3d01a8e
python-example-app-syft.spdx.json Expired
18.2 KB
sha256:63329b2117e577946c24ff40e5951a831db30b3500ca5d7b16ab318373656ce1
yxtay~python-example-app~AA82ML.dockerbuild Expired
19.4 KB
sha256:f5d1927edadefa93661c7e35595da88615406a67acf1d4a94560855e55e99bc0
yxtay~python-example-app~CJG4FQ.dockerbuild Expired
18.1 KB
sha256:6e59f2742fe79bdcae0162adf341d3bcdb3e451e2ba50fa9357fcb3cce8c126c
yxtay~python-example-app~M3DPVX.dockerbuild Expired
19.3 KB
sha256:7156abff96d66a84429549a9c38fceb4a0653ea027abb82a6cff315cda79d5e7