github-actions[bot]
commented
2 months ago Dependency Review
The following issues were found:
- ✅ 0 vulnerable package(s)
- ✅ 0 package(s) with incompatible licenses
- ✅ 0 package(s) with invalid SPDX license definitions
- ⚠️ 1 package(s) with unknown licenses.
License Issues
.github/workflows/snyk-security.yml
| Package | Version | License | Issue Type |
| snyk/actions/setup | cdb760004ba9ea4d525f2e043745dfe85bb9077e | Null | Unknown License |
OpenSSF Scorecard
| Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| actions/snyk/actions/setup | cdb760004ba9ea4d525f2e043745dfe85bb9077e | :green_circle: 6.5 | Details
|
Scanned Manifest Files
.github/workflows/snyk-security.yml
- snyk/actions/setup@cdb760004ba9ea4d525f2e043745dfe85bb9077e
- snyk/actions/setup@806182742461562b67788a64410098c9d9b96adb
Bumps snyk/actions from 806182742461562b67788a64410098c9d9b96adb to cdb760004ba9ea4d525f2e043745dfe85bb9077e.
Commits
cdb7600Merge pull request #152 from azamat-aminov/patch-17ceb389Merge branch 'master' into patch-19213221chore: add better logging to setup action script (#153)837cb35Update README.mdae94425feat: change downloadurl and add fallback on setup action (#148)6312a53revert "feat: change downloadurl and add fallback on setup action (#146)" (#147)2db9624feat: change downloadurl and add fallback on setup action (#146)640e317Merge pull request #145 from snyk/fix/CLI-279_add_alpinec266a01chore: improve tests9e6c4a2feat: add alpine supportDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show