Skip to content
Github workflow test

Bump anchore/sbom-action from 0.17.3 to 0.17.4 #249

Sign in to view logs

Bump anchore/sbom-action from 0.17.3 to 0.17.4

Bump anchore/sbom-action from 0.17.3 to 0.17.4 #249

Triggered via pull request October 16, 2024 07:37
@dependabotdependabot[bot]
opened #427
dependabot/github_actions/anchore/sbom-action-0.17.4
Status Success
Total duration 14m 43s
Artifacts 1

no_func_test.yml

on: pull_request
escapes-test
18s
escapes-test
vuls-test
28s
vuls-test
docker-build-test
14m 33s
docker-build-test
Matrix: binary-build-test
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 3 warnings
escapes-test: internal/fabric/common/crypto/random.go#L32
make([]byte, len) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L27
map[elliptic.Curve]*big.Int{...} escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L28
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L29
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L30
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L31
new(big.Int) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L35
leaking param: raw
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L37
new(ECDSASignature) escapes to heap
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L40
... argument does not escape
escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L62
leaking param content: k
The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L1
FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/
The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L3
FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/
Legacy key/value format with whitespace separator should not be used: Dockerfile#L8
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Artifacts

Produced during runtime
Name Size
Hyperledger-TWGC~tape~3H0RK4.dockerbuild
91.1 KB