Skip to content
Github workflow test

Bump anchore/sbom-action from 0.17.8 to 0.17.9 in the github-actions group #275

Sign in to view logs

Bump anchore/sbom-action from 0.17.8 to 0.17.9 in the github-actions group

Bump anchore/sbom-action from 0.17.8 to 0.17.9 in the github-actions group #275

Triggered via pull request December 16, 2024 07:15
@dependabotdependabot[bot]
opened #447
dependabot/github_actions/github-actions-d86afc3ec3
Status Success
Total duration 15m 6s
Artifacts 1

no_func_test.yml

on: pull_request
escapes-test
37s
escapes-test
vuls-test
25s
vuls-test
docker-build-test
14m 56s
docker-build-test
Matrix: binary-build-test
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 7 warnings
escapes-test: internal/fabric/common/crypto/random.go#L32
make([]byte, len) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L27
map[elliptic.Curve]*big.Int{...} escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L28
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L29
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L30
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L31
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L35
leaking param: raw
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L37
new(ECDSASignature) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L40
... argument does not escape
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L62
leaking param content: k
vuls-test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
binary-build-test (ubuntu-latest)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
escapes-test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
docker-build-test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Legacy key/value format with whitespace separator should not be used: Dockerfile#L8
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L1
FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/
The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L3
FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/

Artifacts

Produced during runtime
Name Size
Hyperledger-TWGC~tape~KDMWQZ.dockerbuild
92.4 KB