Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[APIPUB-38] docker scout configuration #44

Merged
merged 1 commit into from
Mar 1, 2024

Conversation

jpardogrowthaccelerationpartners
Copy link
Contributor

No description provided.

Copy link

github-actions bot commented Feb 29, 2024

🔍 Vulnerabilities of development:latest

📦 Image Reference development:latest
digestsha256:f88fa4f42ff462531bb8daad3bd0217b97f0c2d4f2cd8efb74d85db19893bf6b
vulnerabilitiescritical: 0 high: 1 medium: 1 low: 0
platformlinux/amd64
size89 MB
packages525
📦 Base Image mcr.microsoft.com/dotnet/runtime:8.0-alpine
digestsha256:ceeb0a2d618b183c2768f6cdee2f8082cb815dd723b115e44bfc17cb0f45ec86
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 1 medium: 0 low: 0 libxml2 2.11.7-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.19

high : CVE--2024--25062

Affected range<2.12.5-r0
Fixed version2.12.5-r0
Description
critical: 0 high: 0 medium: 1 low: 0 curl 8.5.0-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.19

medium : CVE--2024--0853

Affected range<8.6.0-r0
Fixed version8.6.0-r0
Description

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Copy link

@andonyns andonyns left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update actions versions to remove warnings

Copy link
Contributor

@jasonh-edfi jasonh-edfi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reviewed as on track for Docker Scout configuration & API Publisher

@jasonh-edfi jasonh-edfi merged commit 4ea0fdb into main Mar 1, 2024
10 checks passed
@jasonh-edfi jasonh-edfi deleted the dockerscout-configuration branch March 1, 2024 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants