finos / git-proxy

Deploy custom push protections and policies on top of Git
https://git-proxy.finos.org
Apache License 2.0
87 stars 59 forks source link

chore(deps): update actions/checkout digest to 692973e #609

Closed renovate[bot] closed 3 weeks ago

renovate[bot] commented 3 weeks ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action digest a5ac7e5 -> 692973e

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 3 weeks ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/checkout 692973e3d937129bcbf40652eb9f2f61becf3332 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout a5ac7e51b41094c92402da3b24376905380afc29 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout 692973e3d937129bcbf40652eb9f2f61becf3332 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout a5ac7e51b41094c92402da3b24376905380afc29 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout 692973e3d937129bcbf40652eb9f2f61becf3332 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout a5ac7e51b41094c92402da3b24376905380afc29 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout 692973e3d937129bcbf40652eb9f2f61becf3332 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/checkout a5ac7e51b41094c92402da3b24376905380afc29 :green_circle: 7.5
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/ci.yml
  • actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
  • actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
.github/workflows/cve-scanning-node.yml
  • actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
  • actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
.github/workflows/lint.yml
  • actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
  • actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
.github/workflows/npm.yml
  • actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
  • actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
netlify[bot] commented 3 weeks ago

Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
Latest commit 78838306489f60ebb8f487d128199c421c74d625
Latest deploy log https://app.netlify.com/sites/endearing-brigadeiros-63f9d0/deploys/666b2597bfcb120008e9d2b5
codecov[bot] commented 3 weeks ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 57.39%. Comparing base (537407e) to head (7883830).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #609 +/- ## ======================================= Coverage 57.39% 57.39% ======================================= Files 46 46 Lines 1582 1582 ======================================= Hits 908 908 Misses 674 674 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.