docs: modernize security policy and vulnerability reporting #3139
Siddhazntxbuild_docker.yml
on: pull_request
End-to-end test (Docker)
16m 36s
Test on macOS
4m 46s
End-to-end test (Podman)
13m 24s
Matrix: Push image
Annotations
4 warnings
|
Test on macOS
Restore cache failed: Dependencies file is not found in /Users/runner/work/augur/augur. Supported file pattern: go.sum
|
|
Sensitive data should not be used in the ARG or ENV commands:
docker/rabbitmq/Dockerfile#L9
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "RABBIT_MQ_DEFAULT_PASSWORD")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Variables should be defined before their use:
docker/keyman/Dockerfile#L13
UndefinedVar: Usage of undefined variable '$PYTHONPATH'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
Sensitive data should not be used in the ARG or ENV commands:
docker/database/Dockerfile#L11
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "POSTGRES_PASSWORD")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
chaoss~augur~8UKHCY.dockerbuild
|
31.5 KB |
sha256:fec8f5107acefb2250fae0a189a962c567c646ab30791b12e4eb6922eba40d2e
|
|
|
chaoss~augur~9W5HXV.dockerbuild
|
35.6 KB |
sha256:4a175c88aac0b30080bedd2b6be523ae80f5304354ac97b576283e83f0e16e12
|
|
|
chaoss~augur~QPK1DC.dockerbuild
|
42 KB |
sha256:88a52afc559ab6f99ec059af3f04aa5d4881a92dfd47edd2f56a6f5762eb6a5f
|
|
|
chaoss~augur~U3M4EM.dockerbuild
|
148 KB |
sha256:2d4cb643bbbb46025d8ab80af59e5a0e2eefbd5872dae500f4787b09b59dcbb3
|
|