fix: rootless support for Alpine container image #246
security_scanning.yml
on: pull_request
setup-matrix
3s
Matrix: scan_ci_container
Annotations
4 warnings
|
Scan amd64 CI container
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Sensitive data should not be used in the ARG or ENV commands:
openvoxserver/Containerfile#L38
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "INTERMEDIATE_CA_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Scan arm64 CI container
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Sensitive data should not be used in the ARG or ENV commands:
openvoxserver/Containerfile#L38
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "INTERMEDIATE_CA_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
OpenVoxProject~container-openvoxserver~3KTX1D.dockerbuild
|
70.4 KB |
sha256:75a1c54105b4f4cf43b6e0318236c280d612fd1948505a0db603e3c8daec590c
|
|
|
OpenVoxProject~container-openvoxserver~YKL3CH.dockerbuild
|
71.2 KB |
sha256:8d5863582df6e7775abe4fff6fc0f7c17764ffce39ebc6ece89270a0f0cbacc6
|
|