You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
The Pinned-Dependencies check scans three types of files: workflows, Dockerfiles and shell scripts. If a certain type of file doesn't exist, --show-details outputs the same thing as if there was such a file and it was correctly pinned.
For example, a repo with no Dockerfiles gets: Info: Dockerfile dependencies are pinned Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles.
Describe the solution you'd like
When there are no files of a certain class, --show-details should say so: Info: No Dockerfile found.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
The Pinned-Dependencies check scans three types of files: workflows, Dockerfiles and shell scripts. If a certain type of file doesn't exist,
--show-details
outputs the same thing as if there was such a file and it was correctly pinned.For example, a repo with no Dockerfiles gets:
Info: Dockerfile dependencies are pinned Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
.Describe the solution you'd like
When there are no files of a certain class,
--show-details
should say so:Info: No Dockerfile found
.The text was updated successfully, but these errors were encountered: