Closed dependabot[bot] closed 3 months ago
The following issues were found:
⚠️: No snapshots were found for the head SHA 5b8cd824979453cdcb22bd9dc1f0ecfd91522e57.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.
Package | Version | License | Issue Type |
bridgecrewio/checkov-action | 4f1262efb561a0057cbedffffb93644228257c9e | Null | Unknown License |
Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
actions/actions/dependency-review-action | 72eb03d02c7872a771aacd928f3123ac62ad6d3a | :green_circle: 7 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | 2e230e8fe0ad3a14a340ad0815ddb96d599d2aff | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/dependency-review-action | 0c155c5e8556a497adf53f2c18edabf945ed8e70 | :green_circle: 7 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/bridgecrewio/checkov-action | 4f1262efb561a0057cbedffffb93644228257c9e | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/analyze | 2e230e8fe0ad3a14a340ad0815ddb96d599d2aff | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/init | 2e230e8fe0ad3a14a340ad0815ddb96d599d2aff | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | 2e230e8fe0ad3a14a340ad0815ddb96d599d2aff | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/bridgecrewio/checkov-action | cbef505ba3282486a24541d7c862e19266ad0d96 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/analyze | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/init | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/mikepenz/action-junit-report | ac30be7acb0a361e5492575ab42e47fcadec4928 | :green_circle: 5.7 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/mikepenz/action-junit-report | 9379f0ccddcab154835d4e2487555ee79614fe95 | :green_circle: 5.7 | Details
|
Coverage Report
File Stmts Miss Cover Missing semgr8s __main__.py 16 16 0% 5–29
app.py 78 3 96% 116, 176–177
k8s_api.py 22 2 91% 43–44
updater.py 29 2 93% 49–50
TOTAL 197 23 88%
Tests | Skipped | Failures | Errors | Time |
---|---|---|---|---|
18 | 0 :zzz: | 0 :x: | 0 :fire: | 2.189s :stopwatch: |
Superseded by #274.
Bumps the gh-actions-packages group with 4 updates in the / directory: github/codeql-action, actions/dependency-review-action, bridgecrewio/checkov-action and mikepenz/action-junit-report.
Updates
github/codeql-action
from 3.25.6 to 3.25.8Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
2e230e8
Merge pull request #2323 from github/update-v3.25.8-18b06dd1d66ad891
Update changelog for v3.25.818b06dd
Merge pull request #2322 from github/dependabot/npm_and_yarn/npm-10d82c2911200dd0c
Update checked-in dependencies2bb35ea
bump the npm group with 4 updates9c15e42
Merge pull request #2321 from github/update-bundle/codeql-bundle-v2.17.498e7922
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.4440350b
Add changelog noted4fcc8b
Update default bundle to codeql-bundle-v2.17.4add199b
Merge pull request #2320 from github/angelapwen/use-linked-in-testsUpdates
actions/dependency-review-action
from 4.3.2 to 4.3.3Release notes
Sourced from actions/dependency-review-action's releases.
Commits
72eb03d
Merge pull request #781 from actions/release-v4.3.3137d8b4
bump to version v4.3.3e6b618e
Merge pull request #767 from actions/max-comment-length3c42649
fix ws for linter8e6ea8d
update packaging1b3d277
post-review: add PR comment full summary test case220872c
Update src/main.ts087d0f8
repackage to update dist4531204
whitespacedf1ca89
appease linterUpdates
bridgecrewio/checkov-action
from 12.2762.0 to 12.2769.0Commits
4f1262e
Bump checkov container version to 3.2.1256ab2f42
Bump checkov container version to 3.2.1249342aec
Bump checkov container version to 3.2.12348a1028
Bump checkov container version to 3.2.122329e2bb
Bump checkov container version to 3.2.1153568801
Bump checkov container version to 3.2.1145ec4ca5
Bump checkov container version to 3.2.113Updates
mikepenz/action-junit-report
from 4.2.1 to 4.2.2Release notes
Sourced from mikepenz/action-junit-report's releases.
Commits
ac30be7
Merge pull request #1101 from mikepenz/feature/dependency_updates_20240530fdfd21a
- add eslint import15fd1d8
```0405bc6
Merge branch 'feature/add-classname-to-check-title-template'a40320b
- slightly additional handling for class name8c4af8b
Fix main092d949
Fix readmec55f2d4
Add classname to check_title_templateDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show