ci: add main ci jobs #11
xophampr.yml
on: pull_request
ci
/
conditionals
0s
ci
/
...
/
ossf-scorecard
20s
ci
/
...
/
dependency review
8s
ci
/
...
/
check-commit-message
3s
ci
/
...
/
unit tests
0s
ci
/
...
/
bandit
31s
ci
/
...
/
black
26s
ci
/
...
/
checkov
32s
ci
/
...
/
codeql
2m 13s
ci
/
...
/
hadolint
17s
ci
/
...
/
kubelinter
7s
ci
/
...
/
pylint
29s
ci
/
...
/
semgrep
35s
ci
/
...
/
trivy config
38s
ci
/
...
/
deploy
0s
ci
/
...
/
trivy image
0s
ci
/
...
/
grype
0s
ci
/
...
/
dependency review
0s
Matrix: ci / integration-test / functional
Matrix: ci / integration-test / k8s versions
Matrix: ci / integration-test / optional
Matrix: ci / integration-test / optional k8s versions
Matrix: ci / integration-test / self-hosted-notary
Annotations
13 errors and 10 warnings
|
ci / sast / kubelinter
Process completed with exit code 1.
|
|
ci / sast / pylint
Process completed with exit code 20.
|
|
ci / sast / bandit
Process completed with exit code 1.
|
|
ci / sast / checkov:
deployment/deployment.yaml#L3
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L15
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L31
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L46
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L119
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L164
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L225
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L319
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L319
CKV_K8S_49: "Minimize wildcard use in Roles and ClusterRoles"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L335
CKV_K8S_21: "The default namespace should not be used"
|
|
ci / build / context
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: docker/metadata-action@507c2f2dc502c992ad446e3d7a5dfbe311567a96. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / compliance / dependency review
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/dependency-review-action@7bbfa034e752445ea40215fff1c3bf9597993d3f. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / sast / hadolint
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/upload-sarif@66b90a5db151a8042fa97405c6cf843bbe433f7b. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / compliance / ossf-scorecard
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/upload-sarif@66b90a5db151a8042fa97405c6cf843bbe433f7b. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / sast / checkov
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/upload-sarif@66b90a5db151a8042fa97405c6cf843bbe433f7b. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / sast / semgrep
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/upload-sarif@66b90a5db151a8042fa97405c6cf843bbe433f7b. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / sast / trivy config
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/upload-sarif@32dc499307d133bb5085bae78498c0ac2cf762d5. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / build / build
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7, docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a, docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671, anchore/sbom-action@07978da4bdb4faa726e52dfc6b1bed63d4b56479, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / sast / codeql
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/init@407ffafae6a767df3e0230c3df91b6443ae8df75, github/codeql-action/analyze@407ffafae6a767df3e0230c3df91b6443ae8df75. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
ci / sast / codeql
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
cosign.pub
Expired
|
178 Bytes |
|
|
sbom.cdx
Expired
|
298 KB |
|