Github workflow test

Bump ossf/scorecard-action from 2.3.3 to 2.4.0 #224

Sign in to view logs

Triggered via pull request September 19, 2024 13:16

dependabot[bot]

synchronize #410

dependabot/github_actions/ossf/scorecard-action-2.4.0

Status Success

Total duration 14m 5s

Artifacts 1

no_func_test.yml

on: pull_request

docker-build-test

Matrix: binary-build-test

Annotations

10 errors and 3 warnings

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L35

leaking param: raw

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L37

new(ECDSASignature) escapes to heap

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L40

... argument does not escape

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L62

leaking param content: k

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L62

s does not escape

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L65

... argument does not escape

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L71

leaking param content: k

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L71

leaking param content: s

escapes-test: internal/fabric/bccsp/utils/ecdsa.go#L71

leaking param: s to result ~r0 level=0

escapes-test: internal/fabric/bccsp/utils/keys.go#L18

leaking param: der

The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L3

FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/

Legacy key/value format with whitespace separator should not be used: Dockerfile#L8

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

The 'as' keyword should match the case of the 'from' keyword: Dockerfile#L1

FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/

Artifacts

Produced during runtime

Name	Size
Hyperledger-TWGC~tape~ENID4P.dockerbuild	59.8 KB