Update ckanext-schemingdcat to v4.2.3 and add private fields to ennvars #65
Annotations
9 errors
Run Trivy container image vulnerability scanner
Process completed with exit code 1.
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L27
SC3013 warning: In POSIX sh, -ef is undefined.
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L27
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L27
DL3015 info: Avoid additional packages by specifying `--no-install-recommends`
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L27
DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L75
SC2086 info: Double quote to prevent globbing and word splitting.
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L75
DL3003 warning: Use WORKDIR to switch to a directory
|
Linting Dockerfile with hadolint in GH Actions:
ckan/Dockerfile#L75
DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
Upload Trivy scan results to GitHub Security tab
Path does not exist: trivy-results.sarif
|
Loading