Closed dependabot[bot] closed 2 weeks ago
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
Descriptor | Linter | Files | Fixed | Errors | Elapsed time |
---|---|---|---|---|---|
✅ ACTION | actionlint | 16 | 0 | 0.17s | |
✅ DOCKERFILE | hadolint | 2 | 0 | 0.64s | |
✅ JSON | prettier | 15 | 0 | 0 | 0.7s |
✅ JSON | v8r | 14 | 0 | 20.03s | |
✅ MARKDOWN | markdownlint | 8 | 0 | 0 | 0.98s |
✅ MARKDOWN | markdown-table-formatter | 8 | 0 | 0 | 0.22s |
✅ REPOSITORY | checkov | yes | no | 15.56s | |
✅ REPOSITORY | gitleaks | yes | no | 0.54s | |
✅ REPOSITORY | git_diff | yes | no | 0.02s | |
✅ REPOSITORY | grype | yes | no | 13.31s | |
✅ REPOSITORY | secretlint | yes | no | 1.25s | |
✅ REPOSITORY | trivy | yes | no | 6.33s | |
✅ REPOSITORY | trivy-sbom | yes | no | 0.67s | |
✅ REPOSITORY | trufflehog | yes | no | 3.97s | |
✅ SPELL | lychee | 54 | 0 | 1.95s | |
✅ YAML | prettier | 21 | 0 | 0 | 0.99s |
✅ YAML | v8r | 21 | 0 | 12.76s | |
✅ YAML | yamllint | 21 | 0 | 0.55s |
See detailed report in MegaLinter reports
Comparing ghcr.io/philips-software/amp-devcontainer-rust:latest
to ghcr.io/philips-software/amp-devcontainer-rust@sha256:cd64bcbc67a5643e450d11c9c6145403a12044cfaa1ea1637b3aa68f74c60ba9
OS/Platform | Previous Size | Current Size | Delta |
---|---|---|---|
linux/amd64 | 432.86M | 433.15M | 304.42K (+0.07%) |
linux/arm64 | 572.09M | 572.36M | 278.83K (+0.05%) |
Comparing ghcr.io/philips-software/amp-devcontainer-cpp:latest
to ghcr.io/philips-software/amp-devcontainer-cpp@sha256:40c4497344a103fde16b0d26d434c729aae260e4200a5d9882f482b6d6c7c840
OS/Platform | Previous Size | Current Size | Delta |
---|---|---|---|
linux/amd64 | 640.74M | 641.13M | 395.64K (+0.06%) |
linux/arm64 | 633.10M | 633.48M | 384.88K (+0.06%) |
2 files ±0 2 suites ±0 53s :stopwatch: -1s 26 tests ±0 26 :white_check_mark: ±0 0 :zzz: ±0 0 :x: ±0 28 runs ±0 28 :white_check_mark: ±0 0 :zzz: ±0 0 :x: ±0
Results for commit 8be5df0f. ± Comparison against base commit 69d9ce8e.
Description | Value |
---|---|
Number of added lines | 2 |
Number of deleted lines | 2 |
Number of changed files | 2 |
Number of commits | 1 |
Number of reviews | 1 |
Number of comments (w/o review comments) | 5 |
Number of reviews that contains a comment to resolve | 0 |
Number of reviews that requested a change from the author | 0 |
Number of reviews that approved the Pull Request | 1 |
Get the total number of participants of a Pull Request | 4 |
Description | Value |
---|---|
PR lead time (from creation to close of PR) | 6 Hours |
Time that was spend on the branch before the PR was created | 1 Sec |
Time that was spend on the branch before the PR was merged | 6 Hours |
Time to merge after last review | 14.4 Min |
Description | Value |
---|---|
Total runtime for last status check run (Workflow for PR) | 18.3 Min |
Total time spend in last status check run on PR | 5.8 Hours |
🎉 Hooray! The changes in this pull request went live with the release of v5.1.4 🎉
Bumps the github-actions group with 1 update: step-security/harden-runner.
Updates
step-security/harden-runner
from 2.9.0 to 2.9.1Release notes
Sourced from step-security/harden-runner's releases.
Commits
5c7944e
Merge pull request #440 from step-security/rc-11c79be45
Merge branch 'main' into rc-11deb3383
Merge pull request #446 from h0x0er/log-step23c8215
update dist727d06a
logging stepf0db2aa
Merge pull request #441 from step-security/dependabot/github_actions/github/c...1938ffc
Merge branch 'main' into dependabot/github_actions/github/codeql-action-3.25.138e7dd2c
Merge pull request #442 from step-security/dependabot/github_actions/step-sec...f2823ee
Bump step-security/publish-unit-test-result-action from 1 to 25f95e05
Bump github/codeql-action from 2.13.4 to 3.25.13Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show