Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#… #31
ccojocarAnnotations
1 error and 5 warnings
|
build
Process completed with exit code 1.
|
|
build
The following actions use a deprecated Node.js version and will be forced to run on node20: CycloneDX/gh-gomod-generate-sbom@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
build
You are using 'latest' as default version. Will lock to '~> v2'.
|
|
Legacy key/value format with whitespace separator should not be used:
Dockerfile#L12
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
|
Default value for global ARG results in an empty or invalid base image name:
Dockerfile#L2
InvalidDefaultArgInFrom: Default value for ARG golang:${GO_VERSION}-alpine results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Default value for global ARG results in an empty or invalid base image name:
Dockerfile#L10
InvalidDefaultArgInFrom: Default value for ARG golang:${GO_VERSION}-alpine results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
securego~gosec~E5VB3I.dockerbuild
|
61 KB |
|