Skip to content

build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 #46

build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0

build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 #46

Triggered via pull request March 13, 2024 22:57
Status Failure
Total duration 51s
Artifacts

security.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 2 warnings
SCA
azure.AzureVerifier.fetchSignature calls http.Client.Do
SCA
azure.AzureVerifier.downloadIntermediateCertificates calls http.Get
SCA
azure.AzureVerifier.fetchSignature calls http.Client.Do, which eventually calls textproto.Reader.ReadLine
SCA
azure.AzureVerifier.fetchSignature calls io.ReadAll, which eventually calls textproto.Reader.ReadMIMEHeader
SCA
azure.AzureVerifier.downloadIntermediateCertificates calls io.Copy, which eventually calls x509.Certificate.Verify
SCA
azure.AzureVerifier.fetchSignature calls io.ReadAll, which eventually calls internal.chunkedReader.Read
SCA
azure.AzureVerifier.convertSignatureToPKCS7 calls exec.Cmd.Run, which eventually calls filepath.Abs
SCA
azure.AzureVerifier.convertSignatureToPKCS7 calls exec.Cmd.Run, which eventually calls filepath.Abs
SCA
azure.AzureVerifier.convertSignatureToPKCS7 calls exec.Command, which calls filepath.Base
SCA
azure.AzureVerifier.convertSignatureToPKCS7 calls exec.Command, which calls filepath.Base
SCA
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/setup-go@v4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
SAST
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/setup-go@v4, golangci/golangci-lint-action@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.