Merge pull request #48 from OpenVoxProject/fix_alpine_2 #90
security_scanning.yml
on: push
setup-matrix
4s
Matrix: Scan CI container
Annotations
4 warnings
|
Scan CI container (8, 8.8.1-1+ubuntu24.04, 8.9.1-1+ubuntu24.04, 5.0.0, 1.9.0)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Sensitive data should not be used in the ARG or ENV commands:
openvoxserver/Containerfile#L38
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "INTERMEDIATE_CA_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Scan CI container (7, 7.18.2-1+ubuntu24.04, 7.21.2-1+ubuntu24.04, 5.0.0, 1.9.0)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Sensitive data should not be used in the ARG or ENV commands:
openvoxserver/Containerfile#L38
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "INTERMEDIATE_CA_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
OpenVoxProject~container-openvoxserver~7GQPCQ.dockerbuild
Expired
|
63 KB |
sha256:18ee6cf68b3d9f2d516b018f7594251df681fa8b28fb347efe04290bf1f25765
|
|
|
OpenVoxProject~container-openvoxserver~Y5PEKK.dockerbuild
Expired
|
62.2 KB |
sha256:6e93dd27faa1ccd5fbf6eb19927ac23e9653be4a6434759dea482d498a299f47
|
|