Skip to content

PHRAS-4103 Prod xss check #1080

PHRAS-4103 Prod xss check

PHRAS-4103 Prod xss check #1080

Triggered via pull request October 23, 2024 15:46
Status Success
Total duration 10m 8s
Artifacts 6

ci.yml

on: pull_request
build phraseanet-setup  /  build
3m 43s
build phraseanet-setup / build
build phraseanet-nginx  /  build
2m 58s
build phraseanet-nginx / build
build phraseanet-fpm  /  build
4m 21s
build phraseanet-fpm / build
build phraseanet-worker  /  build
3m 47s
build phraseanet-worker / build
build phraseanet-db  /  build
33s
build phraseanet-db / build
build phraseanet-elasticsearch  /  build
21s
build phraseanet-elasticsearch / build
Fit to window
Zoom out
Zoom in

Annotations

11 warnings
build phraseanet-elasticsearch / build
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2, aws-actions/configure-aws-credentials@v2, aws-actions/amazon-ecr-login@v1, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
build phraseanet-db / build
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2, aws-actions/configure-aws-credentials@v2, aws-actions/amazon-ecr-login@v1, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
build phraseanet-nginx / build
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2, aws-actions/configure-aws-credentials@v2, aws-actions/amazon-ecr-login@v1, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L53
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "SSH_PRIVATE_KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
build phraseanet-setup / build
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2, aws-actions/configure-aws-credentials@v2, aws-actions/amazon-ecr-login@v1, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L53
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "SSH_PRIVATE_KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
build phraseanet-worker / build
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2, aws-actions/configure-aws-credentials@v2, aws-actions/amazon-ecr-login@v1, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L53
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "SSH_PRIVATE_KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
build phraseanet-fpm / build
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2, aws-actions/configure-aws-credentials@v2, aws-actions/amazon-ecr-login@v1, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L53
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "SSH_PRIVATE_KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
unit test
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/login-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

Artifacts

Produced during runtime
Name Size
alchemy-fr~Phraseanet~05ZYUH.dockerbuild
116 KB
alchemy-fr~Phraseanet~5650OG.dockerbuild
146 KB
alchemy-fr~Phraseanet~AS60SK.dockerbuild
129 KB
alchemy-fr~Phraseanet~L7J7JZ.dockerbuild
33.4 KB
alchemy-fr~Phraseanet~S3LY08.dockerbuild
34.9 KB
alchemy-fr~Phraseanet~UJ122D.dockerbuild
130 KB