update: bump the gh-actions-packages group across 5 directories with … #78
Starkteetjepush.yml
on: push
ci
/
conditionals
0s
ci
/
...
/
ossf-scorecard
0s
ci
/
...
/
dependency review
0s
ci
/
...
/
check-commit-message
0s
ci
/
...
/
unit tests
30s
ci
/
...
/
checkov
34s
ci
/
...
/
codeql
3m 45s
ci
/
...
/
golangci-lint
1m 40s
ci
/
...
/
gosec
2m 10s
ci
/
...
/
hadolint
22s
ci
/
...
/
kubelinter
20s
ci
/
...
/
semgrep
33s
ci
/
...
/
trivy config
45s
ci
/
...
/
deploy
13s
ci
/
...
/
trivy image
30s
ci
/
...
/
grype
52s
ci
/
...
/
dependency review
19s
Matrix: ci / integration-test / functional
Matrix: ci / integration-test / k8s versions
Matrix: ci / integration-test / optional
Matrix: ci / integration-test / optional k8s versions
Matrix: ci / integration-test / self-hosted-notary
Annotations
10 errors and 2 warnings
|
ci / sast / checkov:
deployment/deployment.yaml#L286
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L286
CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L286
CKV_K8S_43: "Image should use digest"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L286
CKV_K8S_15: "Image Pull Policy should be Always"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L410
CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L410
CKV_K8S_43: "Image should use digest"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L410
CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L286
CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L410
CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"
|
|
ci / sast / checkov:
deployment/deployment.yaml#L219
CKV2_K8S_5: "No ServiceAccount/Node should be able to read all secrets"
|
|
ci / unit-test / unit tests
The following actions use a deprecated Node.js version and will be forced to run on node20: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
ci / sast / trivy config
Uploading multiple SARIF runs with the same category is deprecated and will be removed on June 4, 2025. Please update your workflow to upload a single run per category. For more information, see https://github.blog/changelog/2024-05-06-code-scanning-will-stop-combining-runs-from-a-single-upload
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
cosign.pub
|
287 Bytes |
|
|
sbom.cdx
|
32 KB |
|
|
sse-secure-systems-connaisseur_sha-a2095dd.cyclonedx.json
|
32.1 KB |
|
|
sse-secure-systems~connaisseur~QVSFVJ.dockerbuild
|
47.1 KB |
|