CI

feat: revamp package author check for potential package compromise #659

Sign in to view logs

Triggered via push September 30, 2023 13:24

lirantal

feat/package-author-check-revamp

Status Success

Total duration 45s

Artifacts –

main.yml

on: push

Matrix: build

do semantic release

Annotations

22 warnings

Node 20 (ubuntu-latest)

The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, actions/setup-node@v2, codecov/codecov-action@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/

Node 20 (ubuntu-latest): __tests__/__fixtures__/test.marshall.js#L30

Generic Object Injection Sink

Node 20 (ubuntu-latest): __tests__/marshalls.base.test.js#L49

Generic Object Injection Sink

Node 20 (ubuntu-latest): __tests__/marshalls.base.test.js#L71

Generic Object Injection Sink

Node 20 (ubuntu-latest): __tests__/marshalls.base.test.js#L72

Generic Object Injection Sink

Node 20 (ubuntu-latest): __tests__/marshalls.base.test.js#L95

Generic Object Injection Sink

Node 20 (ubuntu-latest): __tests__/marshalls.base.test.js#L96

Generic Object Injection Sink

Node 20 (ubuntu-latest): lib/cliCommons.js#L23

Function Call Object Injection Sink

Node 20 (ubuntu-latest): lib/helpers/packageRepoUtils.js#L19

Generic Object Injection Sink

Node 20 (ubuntu-latest): lib/helpers/packageRepoUtils.js#L20

Function Call Object Injection Sink

Node 20 (ubuntu-latest): lib/helpers/packageRepoUtils.js#L25

Generic Object Injection Sink

Node 18 (ubuntu-latest)

The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, actions/setup-node@v2, codecov/codecov-action@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/

Node 18 (ubuntu-latest): __tests__/__fixtures__/test.marshall.js#L30

Generic Object Injection Sink

Node 18 (ubuntu-latest): __tests__/marshalls.base.test.js#L49

Generic Object Injection Sink

Node 18 (ubuntu-latest): __tests__/marshalls.base.test.js#L71

Generic Object Injection Sink

Node 18 (ubuntu-latest): __tests__/marshalls.base.test.js#L72

Generic Object Injection Sink

Node 18 (ubuntu-latest): __tests__/marshalls.base.test.js#L95

Generic Object Injection Sink

Node 18 (ubuntu-latest): __tests__/marshalls.base.test.js#L96

Generic Object Injection Sink

Node 18 (ubuntu-latest): lib/cliCommons.js#L23

Function Call Object Injection Sink

Node 18 (ubuntu-latest): lib/helpers/packageRepoUtils.js#L19

Generic Object Injection Sink

Node 18 (ubuntu-latest): lib/helpers/packageRepoUtils.js#L20

Function Call Object Injection Sink

Node 18 (ubuntu-latest): lib/helpers/packageRepoUtils.js#L25

Generic Object Injection Sink