Bump golang.org/x/crypto from 0.5.0 to 0.17.0 #652
dependabot[bot]analysis.yml
on: pull_request
Scorecards
/
Security Scorecards
50s
Sonatype Nancy
/
Sonatype Nancy
32s
Dependency Review
/
Scan dependencies for license compliance
20s
Trivy
/
Filesystem
46m 10s
Trivy
/
Container
0s
FOSSA
/
Find license compliance and security issues
Semgrep Scan
/
semgrep
Matrix: CodeQL
Annotations
5 errors and 3 warnings
|
Scorecards / Security Scorecards
StepSecurity Harden Runner: Reverting agent since allowed endpoint *.blob.core.windows.net could not be resolved
|
|
Dependency Review / Scan dependencies for license compliance
Dependency review detected vulnerable packages.
|
|
CodeQL (go) / CodeQL Analysis
StepSecurity Harden Runner: DNS resolution for domain results-receiver.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
|
|
CodeQL (go) / CodeQL Analysis
StepSecurity Harden Runner: DNS resolution for domain pipelinesghubeus2.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
|
|
Trivy / Filesystem
The hosted runner: GitHub Actions 6 lost communication with the server. Anything in your workflow that terminates the runner process, starves it for CPU/Memory, or blocks its network access can cause this error.
|
|
Dependency Review / Scan dependencies for license compliance
Failed to save: reserveCache failed: connect ECONNREFUSED 54.185.253.63:443
|
|
CodeQL (go) / CodeQL Analysis
Failed to save: reserveCache failed: connect ECONNREFUSED 54.185.253.63:443
|
|
CodeQL (go) / CodeQL Analysis
The "paths"/"paths-ignore" fields of the config only have effect for JavaScript, Python, and Ruby
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
SARIF file
Expired
|
46.5 KB |
|