ci: create scorecard.yaml #62

chgl · 2024-06-19T21:17:45Z

No description provided.

github-actions · 2024-06-19T21:18:35Z

Trivy image scan report

`ghcr.io/miracum/github-reusable-workflow-without-test-image:v1.2.3-beta.123 (debian 12.5)`

72 known vulnerabilities found (CRITICAL: 1 HIGH: 15 MEDIUM: 29 LOW: 24)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version
`libc6`	CVE-2010-4756	LOW	2.36-9+deb12u7
`libc6`	CVE-2018-20796	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010022	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010023	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010024	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010025	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-9192	LOW	2.36-9+deb12u7
`libexpat1`	CVE-2023-52425	HIGH	2.5.0-1
`libexpat1`	CVE-2023-52426	LOW	2.5.0-1
`libexpat1`	CVE-2024-28757	LOW	2.5.0-1
`libgcc-s1`	CVE-2023-4039	MEDIUM	12.2.0-14
`libgcc-s1`	CVE-2022-27943	LOW	12.2.0-14
`libgomp1`	CVE-2023-4039	MEDIUM	12.2.0-14
`libgomp1`	CVE-2022-27943	LOW	12.2.0-14
`libgssapi-krb5-2`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libncursesw6`	CVE-2023-50495	MEDIUM	6.4-4
`libncursesw6`	CVE-2023-45918	LOW	6.4-4
`libpython3.11-minimal`	CVE-2023-24329	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-41105	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-6597	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-27043	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2023-40217	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2024-0450	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2024-4032	LOW	3.11.2-6
`libpython3.11-minimal`	CVE-2024-0397	UNKNOWN	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-24329	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-41105	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-6597	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-27043	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-40217	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-0450	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-4032	LOW	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-0397	UNKNOWN	3.11.2-6
`libsqlite3-0`	CVE-2023-7104	HIGH	3.40.1-2
`libsqlite3-0`	CVE-2024-0232	MEDIUM	3.40.1-2
`libsqlite3-0`	CVE-2021-45346	LOW	3.40.1-2
`libssl3`	CVE-2023-5678	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2023-6129	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2023-6237	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-0727	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-4603	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-4741	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-2511	LOW	3.0.11-1~deb12u2
`libstdc++6`	CVE-2023-4039	MEDIUM	12.2.0-14
`libstdc++6`	CVE-2022-27943	LOW	12.2.0-14
`libtinfo6`	CVE-2023-50495	MEDIUM	6.4-4
`libtinfo6`	CVE-2023-45918	LOW	6.4-4
`libuuid1`	CVE-2022-0563	LOW	2.38.1-5+deb12u1
`python3.11-minimal`	CVE-2023-24329	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-41105	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-6597	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-27043	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2023-40217	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2024-0450	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2024-4032	LOW	3.11.2-6
`python3.11-minimal`	CVE-2024-0397	UNKNOWN	3.11.2-6
`zlib1g`	CVE-2023-45853	CRITICAL	1:1.2.13.dfsg-1

No Misconfigurations found

github-actions · 2024-06-19T21:18:43Z

Trivy image scan report

`ghcr.io/miracum/github-reusable-workflow-without-test-image:pr-62 (debian 12.5)`

72 known vulnerabilities found (CRITICAL: 1 HIGH: 15 MEDIUM: 29 LOW: 24)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version
`libc6`	CVE-2010-4756	LOW	2.36-9+deb12u7
`libc6`	CVE-2018-20796	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010022	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010023	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010024	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010025	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-9192	LOW	2.36-9+deb12u7
`libexpat1`	CVE-2023-52425	HIGH	2.5.0-1
`libexpat1`	CVE-2023-52426	LOW	2.5.0-1
`libexpat1`	CVE-2024-28757	LOW	2.5.0-1
`libgcc-s1`	CVE-2023-4039	MEDIUM	12.2.0-14
`libgcc-s1`	CVE-2022-27943	LOW	12.2.0-14
`libgomp1`	CVE-2023-4039	MEDIUM	12.2.0-14
`libgomp1`	CVE-2022-27943	LOW	12.2.0-14
`libgssapi-krb5-2`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libncursesw6`	CVE-2023-50495	MEDIUM	6.4-4
`libncursesw6`	CVE-2023-45918	LOW	6.4-4
`libpython3.11-minimal`	CVE-2023-24329	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-41105	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-6597	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-27043	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2023-40217	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2024-0450	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2024-4032	LOW	3.11.2-6
`libpython3.11-minimal`	CVE-2024-0397	UNKNOWN	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-24329	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-41105	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-6597	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-27043	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-40217	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-0450	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-4032	LOW	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-0397	UNKNOWN	3.11.2-6
`libsqlite3-0`	CVE-2023-7104	HIGH	3.40.1-2
`libsqlite3-0`	CVE-2024-0232	MEDIUM	3.40.1-2
`libsqlite3-0`	CVE-2021-45346	LOW	3.40.1-2
`libssl3`	CVE-2023-5678	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2023-6129	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2023-6237	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-0727	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-4603	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-4741	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-2511	LOW	3.0.11-1~deb12u2
`libstdc++6`	CVE-2023-4039	MEDIUM	12.2.0-14
`libstdc++6`	CVE-2022-27943	LOW	12.2.0-14
`libtinfo6`	CVE-2023-50495	MEDIUM	6.4-4
`libtinfo6`	CVE-2023-45918	LOW	6.4-4
`libuuid1`	CVE-2022-0563	LOW	2.38.1-5+deb12u1
`python3.11-minimal`	CVE-2023-24329	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-41105	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-6597	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-27043	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2023-40217	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2024-0450	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2024-4032	LOW	3.11.2-6
`python3.11-minimal`	CVE-2024-0397	UNKNOWN	3.11.2-6
`zlib1g`	CVE-2023-45853	CRITICAL	1:1.2.13.dfsg-1

No Misconfigurations found

github-actions · 2024-06-19T21:18:59Z

Trivy image scan report

`ghcr.io/miracum/github-reusable-workflow:pr-62 (debian 12.5)`

72 known vulnerabilities found (CRITICAL: 1 HIGH: 15 MEDIUM: 29 LOW: 24)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version
`libc6`	CVE-2010-4756	LOW	2.36-9+deb12u7
`libc6`	CVE-2018-20796	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010022	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010023	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010024	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-1010025	LOW	2.36-9+deb12u7
`libc6`	CVE-2019-9192	LOW	2.36-9+deb12u7
`libexpat1`	CVE-2023-52425	HIGH	2.5.0-1
`libexpat1`	CVE-2023-52426	LOW	2.5.0-1
`libexpat1`	CVE-2024-28757	LOW	2.5.0-1
`libgcc-s1`	CVE-2023-4039	MEDIUM	12.2.0-14
`libgcc-s1`	CVE-2022-27943	LOW	12.2.0-14
`libgomp1`	CVE-2023-4039	MEDIUM	12.2.0-14
`libgomp1`	CVE-2022-27943	LOW	12.2.0-14
`libgssapi-krb5-2`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libgssapi-krb5-2`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libk5crypto3`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libkrb5-3`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26462	HIGH	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26458	MEDIUM	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2024-26461	MEDIUM	1.20.1-2+deb12u1
`libkrb5support0`	CVE-2018-5709	LOW	1.20.1-2+deb12u1
`libncursesw6`	CVE-2023-50495	MEDIUM	6.4-4
`libncursesw6`	CVE-2023-45918	LOW	6.4-4
`libpython3.11-minimal`	CVE-2023-24329	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-41105	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-6597	HIGH	3.11.2-6
`libpython3.11-minimal`	CVE-2023-27043	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2023-40217	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2024-0450	MEDIUM	3.11.2-6
`libpython3.11-minimal`	CVE-2024-4032	LOW	3.11.2-6
`libpython3.11-minimal`	CVE-2024-0397	UNKNOWN	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-24329	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-41105	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-6597	HIGH	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-27043	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2023-40217	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-0450	MEDIUM	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-4032	LOW	3.11.2-6
`libpython3.11-stdlib`	CVE-2024-0397	UNKNOWN	3.11.2-6
`libsqlite3-0`	CVE-2023-7104	HIGH	3.40.1-2
`libsqlite3-0`	CVE-2024-0232	MEDIUM	3.40.1-2
`libsqlite3-0`	CVE-2021-45346	LOW	3.40.1-2
`libssl3`	CVE-2023-5678	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2023-6129	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2023-6237	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-0727	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-4603	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-4741	MEDIUM	3.0.11-1~deb12u2
`libssl3`	CVE-2024-2511	LOW	3.0.11-1~deb12u2
`libstdc++6`	CVE-2023-4039	MEDIUM	12.2.0-14
`libstdc++6`	CVE-2022-27943	LOW	12.2.0-14
`libtinfo6`	CVE-2023-50495	MEDIUM	6.4-4
`libtinfo6`	CVE-2023-45918	LOW	6.4-4
`libuuid1`	CVE-2022-0563	LOW	2.38.1-5+deb12u1
`python3.11-minimal`	CVE-2023-24329	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-41105	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-6597	HIGH	3.11.2-6
`python3.11-minimal`	CVE-2023-27043	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2023-40217	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2024-0450	MEDIUM	3.11.2-6
`python3.11-minimal`	CVE-2024-4032	LOW	3.11.2-6
`python3.11-minimal`	CVE-2024-0397	UNKNOWN	3.11.2-6
`zlib1g`	CVE-2023-45853	CRITICAL	1:1.2.13.dfsg-1

No Misconfigurations found

github-actions · 2024-06-19T21:20:30Z

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Errors	Elapsed time
✅ ACTION	actionlint	7	0	0.07s
✅ COPYPASTE	jscpd	yes	no	1.15s
✅ DOCKERFILE	hadolint	1	0	0.05s
✅ JSON	jsonlint	3	0	0.18s
✅ JSON	prettier	3	0	0.4s
✅ JSON	v8r	3	0	3.11s
✅ PYTHON	bandit	1	0	0.93s
✅ PYTHON	black	1	0	1.69s
✅ PYTHON	flake8	1	0	1.69s
✅ PYTHON	isort	1	0	0.23s
✅ PYTHON	mypy	1	0	2.1s
✅ PYTHON	pylint	1	0	1.63s
✅ PYTHON	pyright	1	0	6.91s
✅ PYTHON	ruff	1	0	0.02s
✅ REPOSITORY	checkov	yes	no	13.22s
✅ REPOSITORY	devskim	yes	no	1.87s
✅ REPOSITORY	dustilock	yes	no	0.01s
✅ REPOSITORY	gitleaks	yes	no	0.07s
✅ REPOSITORY	git_diff	yes	no	0.0s
✅ REPOSITORY	grype	yes	no	13.16s
✅ REPOSITORY	kics	yes	no	4.04s
✅ REPOSITORY	secretlint	yes	no	0.75s
✅ REPOSITORY	syft	yes	no	0.33s
✅ REPOSITORY	trivy	yes	no	6.38s
✅ REPOSITORY	trivy-sbom	yes	no	4.98s
✅ REPOSITORY	trufflehog	yes	no	2.25s
✅ YAML	prettier	9	0	0.87s
✅ YAML	v8r	9	0	8.71s
✅ YAML	yamllint	9	0	0.52s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

Click here to request the new flavor

MegaLinter is graciously provided by

github-actions · 2024-06-21T11:05:10Z

🎉 This PR is included in version 1.10.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

ci: create scorecard.yaml

c2bacf4

chgl merged commit f5c80e0 into master Jun 19, 2024
24 checks passed

chgl deleted the chgl-patch-3 branch June 19, 2024 21:21

github-actions bot added the released label Jun 21, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci: create scorecard.yaml #62

ci: create scorecard.yaml #62

chgl commented Jun 19, 2024

github-actions bot commented Jun 19, 2024

github-actions bot commented Jun 19, 2024

github-actions bot commented Jun 19, 2024

github-actions bot commented Jun 19, 2024

github-actions bot commented Jun 21, 2024

ci: create scorecard.yaml #62

ci: create scorecard.yaml #62

Conversation

chgl commented Jun 19, 2024

github-actions bot commented Jun 19, 2024

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-without-test-image:v1.2.3-beta.123 (debian 12.5)

72 known vulnerabilities found (CRITICAL: 1 HIGH: 15 MEDIUM: 29 LOW: 24)

No Misconfigurations found

github-actions bot commented Jun 19, 2024

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-without-test-image:pr-62 (debian 12.5)

72 known vulnerabilities found (CRITICAL: 1 HIGH: 15 MEDIUM: 29 LOW: 24)

No Misconfigurations found

github-actions bot commented Jun 19, 2024

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow:pr-62 (debian 12.5)

72 known vulnerabilities found (CRITICAL: 1 HIGH: 15 MEDIUM: 29 LOW: 24)

No Misconfigurations found

github-actions bot commented Jun 19, 2024

🦙 MegaLinter status: ✅ SUCCESS

github-actions bot commented Jun 21, 2024

`ghcr.io/miracum/github-reusable-workflow-without-test-image:v1.2.3-beta.123 (debian 12.5)`

`ghcr.io/miracum/github-reusable-workflow-without-test-image:pr-62 (debian 12.5)`

`ghcr.io/miracum/github-reusable-workflow:pr-62 (debian 12.5)`