Skip to content
scans

ci(github-actions): bump astral-sh/setup-uv from 6.4.3 to 6.5.0 in the github-actions group across 1 directory #913

Sign in to view logs

ci(github-actions): bump astral-sh/setup-uv from 6.4.3 to 6.5.0 in the github-actions group across 1 directory

ci(github-actions): bump astral-sh/setup-uv from 6.4.3 to 6.5.0 in the github-actions group across 1 directory #913

Triggered via pull request August 13, 2025 03:17
@dependabotdependabot[bot]
opened #515
dependabot/github_actions/github-actions-6495f1413d
Status Failure
Total duration 2m 27s
Artifacts 9

scans.yml

on: pull_request
checkov
32s
checkov
clair
35s
clair
devskim
35s
devskim
dustilock
21s
dustilock
gitleaks
21s
gitleaks
grype
42s
grype
grype-container
52s
grype-container
kics
37s
kics
megalinter
2m 21s
megalinter
msdo
40s
msdo
osv-scan-pr  /  osv-scan
36s
osv-scan-pr / osv-scan
syft
43s
syft
trivy-fs
26s
trivy-fs
trivy-image
1m 3s
trivy-image
trufflehog
12s
trufflehog
trunk
44s
trunk
vorpal
16s
vorpal
osv-scan-push  /  osv-scan
osv-scan-push / osv-scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
grype-container
Failed minimum severity level. Found vulnerabilities with level 'high' or higher
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L36
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L46
When installing a package, its pin version should be defined
[MEDIUM] Apt Get Install Pin Version Not Defined: Dockerfile#L94
When installing a package, its pin version should be defined

Artifacts

Produced during runtime
Name Size Digest
SARIF file Expired
588 Bytes
sha256:880bf0368d1343400747f97e0d5ac17c90f88ad59502f8cdc446a0e48c7feb8a
gitleaks-results.sarif Expired
6.64 KB
sha256:b15eec10cdec776160a595884825bba7ddb6f6f00126263bc62f67a1d02a8c4c
megalinter-reports Expired
637 KB
sha256:18fb9df0aa04fdce6f44424929c6428a83a688aa5f3bd572c0db90654c2fd08c
new-json-results Expired
241 Bytes
sha256:10dc0a4056a7f3647fc849367956633ffff2026475cbb4c2f4fc2ad3c12e7f9a
old-json-results Expired
241 Bytes
sha256:d055b4556913295f8e1a5ac22afaa05609989910b6159868eb9649c4aa1784b3
python-example-app-syft.spdx.json Expired
18.2 KB
sha256:831bfc7cae3fa4efc3885720cb1c1a16bf000beb0c6df1c87c28edbcd48b2d35
yxtay~python-example-app~N6E97R.dockerbuild Expired
19.8 KB
sha256:de6fa8396f2459b7b5c61b6cd9f6ea73133d75edf9610e2933bab8cc7441b3b5
yxtay~python-example-app~P7B17G.dockerbuild Expired
19.6 KB
sha256:1be911e0988b62a9a1c995b17b85799c223d184b56761f80b94068a6ae5324e9
yxtay~python-example-app~U1AK6D.dockerbuild Expired
18.8 KB
sha256:040f22402c36ff9359a9a831191b843b43236a4045fdb90592e50275977b495b