Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump cargo-ledger and ledgerwallet versions. Add support for Flex and… #125

Merged
merged 1 commit into from
May 27, 2024

Bump cargo-ledger and ledgerwallet versions. Add support for Flex and…

4f8ae7c
Select commit
Loading
Failed to load commit list.
Merged

Bump cargo-ledger and ledgerwallet versions. Add support for Flex and… #125

Bump cargo-ledger and ledgerwallet versions. Add support for Flex and…
4f8ae7c
Select commit
Loading
Failed to load commit list.
Ledger Wiz (CSPM & secret detection) / Wiz IaC Scanner completed May 27, 2024 in 3s

Wiz IaC Scanner

Ave, Navigator of Node Networks! 🌐

Wiz's owl flew high, returning with news of treasure troves nestled within this PR. 🦉🌟

Revealing IaC misconfigurations with Wiz 🪄

🔮 IaC Misconfigurations Detected: 1

0C 0H 1M 0L 0I

― Note from Wiz: "Bugs flee in fear of your mystical coding spells! 🪄🐛"

Annotations

Check warning on line 40 in full/Dockerfile

See this annotation in the file changed.

@ledger-wiz-cspm-secret-detection ledger-wiz-cspm-secret-detection / Wiz IaC Scanner

Pip install keeping cached packages 

Rule ID: 825ae084-a21d-4595-9378-0b5b9edbc4d1
Severity: Medium
Resource: FROM={{ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-lite:latest}}.{{pip3 install ledgerwallet==0.5.0}}

When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
Raw output 
Expected: The '--no-cache-dir' flag should be set when running 'pip/pip3 install'
Found: The '--no-cache-dir' flag isn't set when running 'pip/pip3 install'
View more details on Ledger Wiz (CSPM & secret detection)