Bump pyjwt from 2.12.1 to 2.13.0 in /auto-tagger in the uv group acro… #543
notdodorepo-infra-scan.yml
on: push
infra-scan
/
Scan with Kics
36s
infra-scan
/
GitHub Actions Security Analysis
30s
sast
/
Semgrep
4m 25s
Annotations
5 errors
|
infra-scan / GitHub Actions Security Analysis:
auto-tagger/action.yml#L32
[sarif] reported by reviewdog 🐶
unpinned image references: container image is pinned to latest
Raw Output:
{"codeFlows":[{"threadFlows":[{"locations":[{"importance":"essential","location":{"logicalLocations":[{"properties":{}}],"message":{"text":"container image is pinned to latest"},"physicalLocation":{"artifactLocation":{"uri":"auto-tagger/action.yml"},"region":{"endColumn":55,"endLine":32,"snippet":{"text":" image: \"docker://ghcr.io/notdodo/auto-tagger:latest\""},"sourceLanguage":"yaml","startColumn":3,"startLine":32}}}}]}]}],"kind":"fail","level":"error","locations":[{"logicalLocations":[{"properties":{}}],"message":{"text":"container image is pinned to latest"},"physicalLocation":{"artifactLocation":{"uri":"auto-tagger/action.yml"},"region":{"endColumn":55,"endLine":32,"snippet":{"text":" image: \"docker://ghcr.io/notdodo/auto-tagger:latest\""},"sourceLanguage":"yaml","startColumn":3,"startLine":32}}}],"message":{"text":"unpinned image references: container image is pinned to latest"},"properties":{},"ruleId":"zizmor/unpinned-images"}
|
|
Security Scan
Canceling since a higher priority waiting request for ghas-security-scan-refs/heads/main exists
|
|
Security Scan
Canceling since a higher priority waiting request for ghas-security-scan-refs/heads/main exists
|
|
sast / Semgrep
Canceling since a higher priority waiting request for ghas-security-scan-refs/heads/main exists
|
|
sast / Semgrep
The operation was canceled.
|