fix: mitigate CVE-2024-42461 - bump elliptic to v6.5.7 #3414

Sign in to view logs

Triggered via pull request October 14, 2024 22:37

petermetz

synchronize #3580

petermetz:fix-cve-2024-42461-elliptic-v6-5-7

Status Failure

Total duration 31m 9s

Artifacts 33

ci.yaml

on: pull_request

compute_changed_packages

ActionLint / Lint_GitHub_Actions

ghcr-besu-all-in-one

ghcr-corda-all-in-one-flowdb

ghcr-example-carbon-accounting

ghcr-example-supply-chain-app

ghcr-fabric2-all-in-one

ghcr-daml-all-in-one

ghcr-keychain-vault-server

yarn_custom_checks

yarn_tools_validate_bundle_names

cactus-api-client

cactus-common-example-server

cactus-core-api

ce-carbon-accounting-backend

ce-carbon-accounting-business-logic-plugin

ce-carbon-accounting-frontend

ce-supply-chain-backend

ce-supply-chain-business-logic-plugin

ce-supply-chain-frontend

cp-consortium-manual

cp-htlc-coordinator-besu

cp-htlc-eth-besu

cp-htlc-eth-besu-erc20

cp-keychain-aws-sm

cp-keychain-azure-kv

cpk-memory-wasm

cp-object-store-ipfs

cp-bungee-hermes

ctp-consortium-manual

ctp-htlc-eth-besu

ctp-htlc-eth-besu-erc20

ctp-ledger-connector-ethereum

cactus-verifier-client

cp-consortium-static

cactus-cmd-api-server

cpl-connector-aries

cpl-connector-besu

cpl-connector-polkadot

cpl-connector-corda

cpl-connector-stellar

ct-cmd-api-server

ctp-ledger-connector-besu

cactus-test-tooling

ghcr-connector-corda-server

ghcr-dev-container-vscode

Annotations

1 error and 6 warnings

ghcr-example-supply-chain-app

Process completed with exit code 1.

compute_changed_packages

The following actions use a deprecated Node.js version and will be forced to run on node20: dorny/paths-filter@v2.11.1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

ce-carbon-accounting-frontend

No files were found with the provided path: ./code-coverage-ts/**/. No artifacts will be uploaded.

ce-supply-chain-frontend

No files were found with the provided path: ./code-coverage-ts/**/. No artifacts will be uploaded.

Artifacts

Produced during runtime

Name	Size
coverage-reports-1	279 KB
coverage-reports-10	1.9 MB
coverage-reports-11	1.16 MB
coverage-reports-13	265 KB
coverage-reports-14	1.39 MB
coverage-reports-15	795 KB
coverage-reports-16	796 KB
coverage-reports-17	631 KB
coverage-reports-18	261 KB
coverage-reports-19	268 KB
coverage-reports-20	325 KB
coverage-reports-21	281 KB
coverage-reports-22	280 KB
coverage-reports-3	543 KB
coverage-reports-32	668 KB
coverage-reports-33	776 KB
coverage-reports-34	936 KB
coverage-reports-35	261 KB
coverage-reports-36	1.76 MB
coverage-reports-37	1.3 MB
coverage-reports-39	459 KB
coverage-reports-4	93.8 KB
coverage-reports-40	448 KB
coverage-reports-41	1.25 MB
coverage-reports-42	1.25 MB
coverage-reports-44	1.03 MB
coverage-reports-46	743 KB
coverage-reports-47	1.42 MB
coverage-reports-5	201 KB
coverage-reports-6	154 KB
coverage-reports-7	1.29 MB
coverage-reports-8	257 KB
coverage-reports-cpp-fabric	996 KB