CI/CD #148
Annotations
1 error and 3 warnings
Scan for vulnerabilities
CVE-2022-40897 - HIGH severity - pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py vulnerability in setuptools
|
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, docker/setup-buildx-action@v2, docker/build-push-action@v4, actions/download-artifact@v3, crazy-max/ghaction-container-scan@v2, actions/upload-artifact@v3, github/codeql-action/upload-sarif@v2. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
Upload SARIF file
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|
Scan for vulnerabilities
CVE-2023-45803 - MEDIUM severity - urllib3: Request body not stripped after redirect from 303 status changes request method to GET vulnerability in urllib3
|
Loading