Github workflow test

Bump anchore/sbom-action from 0.16.1 to 0.17.2 #222

Sign in to view logs

Triggered via pull request September 19, 2024 13:06

dependabot[bot]

synchronize #412

dependabot/github_actions/anchore/sbom-action-0.17.2

Status Success

Total duration 13m 56s

Artifacts 1

no_func_test.yml

on: pull_request

docker-build-test

Matrix: binary-build-test

Annotations

10 errors and 3 warnings

escapes-test: internal/fabric/common/crypto/random.go#L32

make([]byte, len) escapes to heap

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L35

leaking param: raw

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L37

new(ECDSASignature) escapes to heap

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L40

... argument does not escape

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L62

leaking param content: k

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L62

s does not escape

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L65

... argument does not escape

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L71

leaking param content: k

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L71

leaking param content: s

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L71

leaking param: s to result ~r0 level=0

The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L1

FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/

The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L3

FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/

Legacy key/value format with whitespace separator should not be used: Dockerfile#L8

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Artifacts

Produced during runtime

Name	Size
Hyperledger-TWGC~tape~S9ZVZ8.dockerbuild	59.7 KB