[ODS-6126] Use GitHub Action from Docker Scout to analyze docker images #888
Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
🔍 Vulnerabilities of
|
| digest | sha256:bff3e15585a84ca50eabcbb087ad68124c5a9d2ca9fa9870f3d31691e5e7b539 |
| vulnerabilities |     |
| platform | linux/amd64 |
| size | 78 MB |
| packages | 455 |
📦 Base Image alpine:3
| also known as |
|
| digest | sha256:48d9183eb12a05c99bcc0bf44a003607b8e941e1d4f41f9ad12bdcc4b5672f86 |
| vulnerabilities |    |
| if: ${{ github.event_name != 'pull_request_target' }} | ||
| uses: github/codeql-action/upload-sarif@df32e399139a3050671466d7d9b3cbacc1cfd034 #codeql-bundle-v2.15.2 | ||
| with: | ||
| sarif_file: sarif-${{ matrix.dockerfile.name }}.${{ env.PACKAGE_VERSION }}.0-${{ matrix.StandardVersion }}.output.json |
There was a problem hiding this comment.
The current edfialliance/ods-api-web-api image has a vulnerability, but the summary only displays the info for 5.0.0, not sure if this is a buf or expected from the github/codeql-action/upload-sarif action
There was a problem hiding this comment.
To view all Vulnerabilities here . you need to click edited icon . display only show most recent one
semalaiappan
force-pushed
the
ODS-6126
branch
from
5f25520 to
754bca5
Compare
No description provided.