Bump the github-actions group across 1 directory with 8 updates #263
ci.yml
on: pull_request
Matrix: Go Build & Test
Python Test & Lint
39s
Hadolint & Semgrep
19s
Security Regression Tests
54s
Test Count Drift Check
49s
Dependency Vulnerability Audit
56s
Documentation Validation
6s
Shell Script Lint
8s
Release Helper Script Smoke
11s
Validate YAML configs
9s
Image Reference Consistency
3s
Verify action, container, and EOL pins
10s
Supply Chain & SBOM Verification
22s
Sandbox OpenVEX Smoke
7m 57s
Release Branch Hardened Gate
Annotations
10 errors and 4 warnings
|
Dependency Vulnerability Audit
registry: govulncheck found vulnerabilities
|
|
Dependency Vulnerability Audit
securectl.cmdStatus calls fmt.Fprintf, which eventually calls x509.HostnameError.Error
|
|
Dependency Vulnerability Audit
registry.main calls http.Server.ListenAndServe, which eventually calls x509.Certificate.VerifyHostname
|
|
Dependency Vulnerability Audit
registry.main calls http.Server.ListenAndServe, which eventually calls x509.Certificate.Verify
|
|
Dependency Vulnerability Audit
registry.main calls http.Server.ListenAndServe, which eventually calls textproto.Reader.ReadMIMEHeader
|
|
Dependency Vulnerability Audit
airlock: govulncheck found vulnerabilities
|
|
Dependency Vulnerability Audit
airlock.loadSources calls fmt.Errorf, which eventually calls x509.HostnameError.Error
|
|
Dependency Vulnerability Audit
airlock.main calls http.Server.ListenAndServe, which eventually calls x509.Certificate.VerifyHostname
|
|
Dependency Vulnerability Audit
airlock.main calls http.Server.ListenAndServe, which eventually calls x509.Certificate.Verify
|
|
Dependency Vulnerability Audit
airlock.main calls http.Server.ListenAndServe, which eventually calls textproto.Reader.ReadMIMEHeader
|
|
Supply Chain & SBOM Verification
Restore cache failed: Dependencies file is not found in /home/runner/work/SecAI_OS/SecAI_OS. Supported file pattern: go.mod
|
|
Test Count Drift Check
Restore cache failed: Dependencies file is not found in /home/runner/work/SecAI_OS/SecAI_OS. Supported file pattern: go.mod
|
|
Security Regression Tests
Restore cache failed: Dependencies file is not found in /home/runner/work/SecAI_OS/SecAI_OS. Supported file pattern: go.mod
|
|
Dependency Vulnerability Audit
Restore cache failed: Dependencies file is not found in /home/runner/work/SecAI_OS/SecAI_OS. Supported file pattern: go.mod
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sandbox-vex-smoke
|
1.42 KB |
sha256:be91a0ee1e692f4c65a9931bd97896c33376228e538f2850ee0e82fee251bb6f
|
|