chore: migrate azure-sdk-for-go/containerregistry to the latest release #1434
shahramk64scan-vulns.yaml
on: pull_request
Run govulncheck
52s
[Trivy] Scan for vulnerabilities
2m 14s
Annotations
10 errors and 1 warning
|
Run govulncheck
cosign.trustPolicy.GetCosignOpts calls cosign.GetRekorPubs, which eventually calls client.Client.Download
|
|
Run govulncheck
config.GetDefaultPluginPath calls sync.Once.Do, which eventually calls client.Client.Init
|
|
Run govulncheck
cosign.trustPolicy.GetCosignOpts calls cosign.GetRekorPubs, which eventually calls client.Client.Target
|
|
Run govulncheck
cosign.trustPolicy.GetCosignOpts calls cosign.GetRekorPubs, which eventually calls client.Client.Targets
|
|
Run govulncheck
cosign.trustPolicy.GetCosignOpts calls cosign.GetRekorPubs, which eventually calls client.Client.Update
|
|
Run govulncheck
oras.orasStore.GetReferenceManifest calls client.ErrDecodeFailed.Error
|
|
Run govulncheck
oras.orasStore.GetReferenceManifest calls client.ErrDownloadFailed.Error
|
|
Run govulncheck
oras.orasStore.GetReferenceManifest calls client.ErrInvalidURL.Error
|
|
Run govulncheck
oras.orasStore.GetReferenceManifest calls client.ErrMaxDelegations.Error
|
|
Run govulncheck
oras.orasStore.GetReferenceManifest calls client.ErrMetaTooLarge.Error
|
|
Run govulncheck
Restore cache failed: Dependencies file is not found in /home/runner/work/ratify/ratify. Supported file pattern: go.sum
|