Skip to content
govuln

Problem: minor security issue in github workflow #2796

Sign in to view logs

Problem: minor security issue in github workflow

Problem: minor security issue in github workflow #2796

Triggered via pull request July 8, 2024 09:41
@yihuangyihuang
synchronize #1056
yihuang:fix-injection
Status Failure
Total duration 1m 42s
Artifacts –

audit.yml

on: pull_request
check
1m 32s
check
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 1 warning
check
types.queryClient.NFT calls client.Context.Invoke, which eventually calls http.Client.Do
check
types.queryClient.NFT calls grpc.ClientConn.Invoke, which eventually calls http.Client.PostForm
check
chain.main calls cmd.Execute, which eventually calls http.Get
check
chain.main calls cmd.Execute, which eventually calls http.Transport.CloseIdleConnections
check
chain.main calls cmd.Execute, which eventually calls http.Transport.RoundTrip
check
chain.main calls cmd.Execute, which eventually calls blocksync.BlockPool.OnStart
check
chain.main calls cmd.Execute, which eventually calls blocksync.BlockPool.SetPeerRange
check
chain.main calls cmd.Execute, which eventually calls blocksync.NewBlockPool
check
chain.main calls cmd.Execute, which eventually calls blocksync.Reactor.OnStart
check
chain.main calls cmd.Execute, which eventually calls blocksync.Reactor.SwitchToBlockSync
check
The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/setup-go@v3, actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/