Closed dependabot[bot] closed 2 months ago
The following issues were found:
⚠️: No snapshots were found for the head SHA 4191fc097bf4d0bbcc6b1c215be64536705248fe.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.
Package | Version | License | Issue Type |
bridgecrewio/checkov-action | ccb6cc40374256acb074fbcf03519ad207bdb731 | Null | Unknown License |
Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/snok/container-retention-policy | 4f22ef80902ad409ed55a99dc5133cc1250a0d03 | :green_circle: 5.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/snok/container-retention-policy | b56f4ff7539c1f94f01e5dc726671cd619aa8072 | :green_circle: 5.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/dependency-review-action | 72eb03d02c7872a771aacd928f3123ac62ad6d3a | :green_circle: 7.1 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | b611370bb5703a7efb587f9d136a52ea24c5c38c | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/dependency-review-action | 0c155c5e8556a497adf53f2c18edabf945ed8e70 | :green_circle: 7.1 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/bridgecrewio/checkov-action | ccb6cc40374256acb074fbcf03519ad207bdb731 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/analyze | b611370bb5703a7efb587f9d136a52ea24c5c38c | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/init | b611370bb5703a7efb587f9d136a52ea24c5c38c | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | b611370bb5703a7efb587f9d136a52ea24c5c38c | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/bridgecrewio/checkov-action | cbef505ba3282486a24541d7c862e19266ad0d96 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/analyze | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/init | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/github/codeql-action/upload-sarif | 9fdb3e49720b44c48891d036bb502feb25684276 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/MishaKav/pytest-coverage-comment | fa1c641d7e3fa1d98ed95d5f658ccd638b774628 | :green_circle: 4.9 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/docker/build-push-action | 15560696de535e4014efeff63c48f16952e52dd1 | :green_circle: 6.4 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/mikepenz/action-junit-report | db71d41eb79864e25ab0337e395c352e84523afe | :green_circle: 5.7 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/MishaKav/pytest-coverage-comment | a1fe18e2b00c64a765568e2edb9f1706eb8fc88b | :green_circle: 4.9 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/docker/build-push-action | 2cdde995de11925a030ce8070c3d77a52ffcf1c0 | :green_circle: 6.4 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/mikepenz/action-junit-report | 9379f0ccddcab154835d4e2487555ee79614fe95 | :green_circle: 5.7 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | 692973e3d937129bcbf40652eb9f2f61becf3332 | :green_circle: 7.5 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
actions/actions/checkout | a5ac7e51b41094c92402da3b24376905380afc29 | :green_circle: 7.5 | Details
|
Coverage Report
File Stmts Miss Cover Missing semgr8s __main__.py 18 18 0% 5–32
app.py 81 4 95% 117, 177–178, 209
k8s_api.py 22 2 91% 43–44
updater.py 29 2 93% 49–50
TOTAL 202 26 87%
Tests | Skipped | Failures | Errors | Time |
---|---|---|---|---|
18 | 0 :zzz: | 0 :x: | 0 :fire: | 2.208s :stopwatch: |
Superseded by #303.
Bumps the gh-actions-packages group with 8 updates in the / directory:
4.1.6
4.1.7
2.2.1
3.0.0
3.25.6
3.25.11
4.3.2
4.3.3
12.2762.0
12.2802.0
5.3.0
6.2.0
1.1.51
1.1.52
4.2.1
4.3.1
Updates
actions/checkout
from 4.1.6 to 4.1.7Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
692973e
Prepare 4.1.7 release (#1775)6ccd57f
Pin actions/checkout's own workflows to a known, good, stable version. (#1776)b17fe1e
Handle hidden refs (#1774)b80ff79
Bump actions/checkout from 3 to 4 (#1697)b1ec302
Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)Updates
snok/container-retention-policy
from 2.2.1 to 3.0.0Release notes
Sourced from snok/container-retention-policy's releases.
... (truncated)
Commits
4f22ef8
fix: Correct oauth scope checkdef81c2
fix(ci): Use input version tag when building imageab30663
chore: Update docs for release and update action image7793513
chore(deps): bump docker/build-push-action from 5 to 679a0b31
Remove oauth token851b141
Rewrite the action in Rust178bc0b
chore: Update test workflow to test v3-develop branche6eea47
fix(workflows): Correct script and run every 3 hours3bfc979
fix(ci): Revise test dockerfilee66905c
refactor(ci): Add variables to reduce clutterUpdates
github/codeql-action
from 3.25.6 to 3.25.11Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
b611370
Merge pull request #2357 from github/update-v3.25.11-de945755c3e6431f
Update changelog for v3.25.11de94575
Merge pull request #2352 from github/update-bundle/codeql-bundle-v2.17.6a32d305
Add changelog note9ccc995
Update default bundle to codeql-bundle-v2.17.69b7c22c
Merge pull request #2351 from github/dependabot/npm_and_yarn/npm-6791eaa26c9cf3243
Rebuild1895b29
Update checked-in dependencies9dcfde9
Bump the npm group with 2 updates8723b5b
Merge pull request #2350 from github/angelapwen/add-exclude-pr-check-paramUpdates
actions/dependency-review-action
from 4.3.2 to 4.3.3Release notes
Sourced from actions/dependency-review-action's releases.
Commits
72eb03d
Merge pull request #781 from actions/release-v4.3.3137d8b4
bump to version v4.3.3e6b618e
Merge pull request #767 from actions/max-comment-length3c42649
fix ws for linter8e6ea8d
update packaging1b3d277
post-review: add PR comment full summary test case220872c
Update src/main.ts087d0f8
repackage to update dist4531204
whitespacedf1ca89
appease linterUpdates
bridgecrewio/checkov-action
from 12.2762.0 to 12.2802.0Commits
ccb6cc4
Bump checkov container version to 3.2.16473b026f
Bump checkov container version to 3.2.163b1a0cd8
Bump checkov container version to 3.2.16264d5925
Bump checkov container version to 3.2.1611aa570d
Bump checkov container version to 3.2.159955b1a1
Bump checkov container version to 3.2.158738af93
Bump checkov container version to 3.2.156b886776
Bump checkov container version to 3.2.15524be2fc
Bump checkov container version to 3.2.154600be63
Bump checkov container version to 3.2.153Updates
docker/build-push-action
from 5.3.0 to 6.2.0Release notes
Sourced from docker/build-push-action's releases.
Commits
1556069
Merge pull request #1158 from docker/dependabot/npm_and_yarn/docker/actions-t...57e1d34
chore: update generated content309982e
chore(deps): Bump@docker/actions-toolkit
from 0.27.0 to 0.28.09476c25
Merge pull request #1153 from crazy-max/export-retention97be5a4
chore: update generated content9cac6c8
use default retention days for build export artifact31159d4
Merge pull request #1149 from docker/dependabot/npm_and_yarn/docker/actions-t...07e1c3e
chore: update generated contentf7febd6
chore(deps): Bump@docker/actions-toolkit
from 0.26.2 to 0.27.0f6010ea
Merge pull request #1147 from docker/dependabot/npm_and_yarn/docker/actions-t...Updates
MishaKav/pytest-coverage-comment
from 1.1.51 to 1.1.52Release notes
Sourced from MishaKav/pytest-coverage-comment's releases.
Changelog
Sourced from MishaKav/pytest-coverage-comment's changelog.
... (truncated)
Commits
fa1c641
changelog for 1.1.527b6b113
Fix commit SHA for workflow_run (#158)c1c1738
Uselabel
instead ofref
(#160)2e3c380
junit: use data from all testsuites (#168)ed05a2e
fix typo incoverageComment
0e5d939
Fix typo s/Percantage/Percentage/ (#165)0f5f92e
Add sample of permissions/Fix permissions of existing jobs (#162)Updates
mikepenz/action-junit-report
from 4.2.1 to 4.3.1Release notes
Sourced from mikepenz/action-junit-report's releases.
Commits
db71d41
Merge pull request #1122 from mikepenz/fix/11212d70fb2
- revert testcasec4cd1de
- revert annotation optimisation (Skip processing of successful tests if `inc...eb1a2b2
Merge pull request #1111 from mikepenz/feature/dependency_updates_2024062071ce529
```d8a34d8
Merge branch 'refs/heads/GUI-perf'8aa8974
- slight enhancementa0437c7
Skip processing of successful tests ifinclude_passed
is not enabled.1ba5f45
Improve performance by caching repeated file glob results.ac30be7
Merge pull request #1101 from mikepenz/feature/dependency_updates_20240530Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show