Feat: Claude Code on Cortex in two commands, no env vars #1225
huang195security-scans.yaml
on: pull_request
Dependency Review
8s
Shell Script Lint
11s
YAML Lint
10s
Python Security (Bandit)
10s
Dockerfile Lint (Hadolint)
10s
Trivy Filesystem Scan
18s
Verify Action Pinning
4s
Matrix: codeql
Annotations
24 warnings
|
Verify Action Pinning
The process '/usr/bin/git' failed with exit code 128
|
|
Verify Action Pinning
Found actions not pinned to SHA commits:
|
|
Dependency Review
The process '/usr/bin/git' failed with exit code 128
|
|
OpenSSF Scorecard Warning
gomod/github.com/tidwall/pretty has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
gomod/github.com/tidwall/match has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
gomod/github.com/tidwall/gjson has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
gomod/github.com/tidwall/pretty has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
gomod/github.com/tidwall/match has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
gomod/github.com/tidwall/gjson has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
Dockerfile Lint (Hadolint)
The process '/usr/bin/git' failed with exit code 128
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-proxy/Dockerfile#L36
Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-praxis/Dockerfile#L182
Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-envoy/Dockerfile#L28
Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-cpex/Dockerfile#L144
Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-cpex/Dockerfile#L61
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
YAML Lint
The process '/usr/bin/git' failed with exit code 128
|
|
YAML Lint:
.github/workflows/build.yaml#L122
122:151 [line-length] line too long (189 > 150 characters)
|
|
Shell Script Lint
The process '/usr/bin/git' failed with exit code 128
|
|
Python Security (Bandit)
The process '/usr/bin/git' failed with exit code 128
|
|
Trivy Filesystem Scan
The process '/usr/bin/git' failed with exit code 128
|
|
CodeQL Analysis (python)
The process '/usr/bin/git' failed with exit code 128
|
|
CodeQL Analysis (python)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
CodeQL Analysis (go)
The process '/usr/bin/git' failed with exit code 128
|
|
CodeQL Analysis (go)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|