Skip to content

chore: bump github.com/maximhq/bifrost/core from 1.7.13 to 1.8.4 in /authbridge/authlib #1171

chore: bump github.com/maximhq/bifrost/core from 1.7.13 to 1.8.4 in /authbridge/authlib

chore: bump github.com/maximhq/bifrost/core from 1.7.13 to 1.8.4 in /authbridge/authlib #1171

Triggered via pull request September 1, 2026 13:03
Status Failure
Total duration 2m 23s
Artifacts

security-scans.yaml

on: pull_request
Dependency Review
6s
Dependency Review
Shell Script Lint
10s
Shell Script Lint
YAML Lint
16s
YAML Lint
Python Security (Bandit)
9s
Python Security (Bandit)
Dockerfile Lint (Hadolint)
13s
Dockerfile Lint (Hadolint)
Trivy Filesystem Scan
16s
Trivy Filesystem Scan
Verify Action Pinning
6s
Verify Action Pinning
Matrix: codeql
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
CodeQL Analysis (go)
We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.26.4/x64/codeql/go/tools/autobuild.sh". Exit code was 1 and last log line was: 2026/09/01 13:05:03 Extraction failed for all discovered Go projects. See the logs for more details.
CodeQL Analysis (python)
The strategy configuration was canceled because "codeql.go" failed
YAML Lint: .github/workflows/release-binaries.yaml#L77
77:151 [line-length] line too long (168 > 150 characters)
YAML Lint: .github/workflows/build.yaml#L122
122:151 [line-length] line too long (189 > 150 characters)
Verify Action Pinning
Found actions not pinned to SHA commits:
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-proxy/Dockerfile#L36
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-praxis/Dockerfile#L182
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-envoy/Dockerfile#L28
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L144
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L61
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
CodeQL Analysis (go)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
CodeQL Analysis (python)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.