Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🐛 fix Docker remediations for unpinned GHA dependencies #4131

Merged

Commits on May 29, 2024

  1. 🐛 fix Docker remediations for unpinned GHA dependencies

    Previously, as both the check for unpinned dependencies in
    GitHub Actions and the check for unpinned Docker dependencies
    contribute to d.Dependencies, the loop that created remediations
    for Docker dependencies would also create try to create Docker
    remediations for the unpinned GitHub Actions dependencies.
    
    This could get really slow, especially when scanning a repo
    with many GitHub Actions such as https://github.com/apache/beam.
    
    Signed-off-by: Arnout Engelen <arnout@bzzt.net>
    raboof committed May 29, 2024
    Configuration menu
    Copy the full SHA
    fcdfdb7 View commit details
    Browse the repository at this point in the history
  2. 🌱 Small refactor and test for remediations

    Signed-off-by: Arnout Engelen <arnout@bzzt.net>
    raboof committed May 29, 2024
    Configuration menu
    Copy the full SHA
    0a2dcf0 View commit details
    Browse the repository at this point in the history

Commits on May 30, 2024

  1. 🌱 make test data more realistic

    Signed-off-by: Arnout Engelen <arnout@bzzt.net>
    raboof committed May 30, 2024
    Configuration menu
    Copy the full SHA
    1d01c01 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    6e524ed View commit details
    Browse the repository at this point in the history