Skip to content

Add research-vuln-scan workflow #17

Add research-vuln-scan workflow

Add research-vuln-scan workflow #17

Triggered via pull request November 5, 2024 09:40
Status Failure
Total duration 3m 33s
Artifacts

research-vuln-scan.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

1 error and 6 warnings
Docker Scout
Code Scanning could not process the submitted SARIF file: rejecting SARIF, as there are more related locations per result than allowed (2243 > 1000)
Grype
The following actions use a deprecated Node.js version and will be forced to run on node20: anchore/scan-action@d5aa5b6cb9414b0c7771438046ff5bcfa2854ed7. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Grype
Failed minimum severity level. Found vulnerabilities with level 'low' or higher
Grype
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Trivy
Docker build failed with exit code 1, back off 9.84 seconds before retry.
Docker Scout
The following actions use a deprecated Node.js version and will be forced to run on node20: github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Docker Scout
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/