Skip to content

refactor: ♻️👷 Use common tags for plugin lite builds #1246

refactor: ♻️👷 Use common tags for plugin lite builds

refactor: ♻️👷 Use common tags for plugin lite builds #1246

Triggered via pull request September 3, 2026 21:49
Status Success
Total duration 1m 17s
Artifacts

security-scans.yaml

on: pull_request
Dependency Review
6s
Dependency Review
Shell Script Lint
47s
Shell Script Lint
YAML Lint
15s
YAML Lint
Python Security (Bandit)
14s
Python Security (Bandit)
Dockerfile Lint (Hadolint)
7s
Dockerfile Lint (Hadolint)
Trivy Filesystem Scan
21s
Trivy Filesystem Scan
Verify Action Pinning
6s
Verify Action Pinning
Matrix: codeql
Fit to window
Zoom out
Zoom in

Annotations

9 warnings
Verify Action Pinning
Found actions not pinned to SHA commits:
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-proxy/Dockerfile#L36
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-praxis/Dockerfile#L182
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-envoy/Dockerfile#L28
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L144
Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L61
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
YAML Lint: .github/workflows/build.yaml#L129
129:151 [line-length] line too long (189 > 150 characters)
CodeQL Analysis (go)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
CodeQL Analysis (python)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.