fix(security): address CVE-2024-39338 SSRF in axios >= 1.3.2, <= 1.7.3 #155

Sign in to view logs

Triggered via push September 2, 2024 04:46

ruzell22

main

Status Failure

Total duration 1h 51m 2s

Artifacts 43

ci.yaml

on: push

compute_changed_packages

ActionLint / Lint_GitHub_Actions

ghcr-besu-all-in-one

ghcr-corda-all-in-one-flowdb

ghcr-example-carbon-accounting

ghcr-example-supply-chain-app

ghcr-fabric2-all-in-one

ghcr-daml-all-in-one

ghcr-keychain-vault-server

yarn_custom_checks

yarn_tools_validate_bundle_names

cactus-api-client

cactus-cmd-socketio-server

cactus-core-api

ce-carbon-accounting-backend

ce-carbon-accounting-business-logic-plugin

ce-carbon-accounting-frontend

ce-supply-chain-backend

ce-supply-chain-business-logic-plugin

ce-supply-chain-frontend

cp-consortium-manual

cp-htlc-coordinator-besu

cp-htlc-eth-besu

cp-htlc-eth-besu-erc20

cp-keychain-aws-sm

cp-keychain-azure-kv

cpk-memory-wasm

cp-object-store-ipfs

cp-bungee-hermes

ctp-consortium-manual

ctp-htlc-eth-besu

ctp-htlc-eth-besu-erc20

ctp-ledger-connector-ethereum

cactus-verifier-client

cp-consortium-static

cactus-cmd-api-server

cpl-connector-aries

cpl-connector-besu

cpl-connector-polkadot

cpl-connector-corda

cpl-connector-stellar

ct-cmd-api-server

ctp-ledger-connector-besu

cactus-test-tooling

ghcr-connector-corda-server

ghcr-dev-container-vscode

Annotations

2 errors and 6 warnings

cpl-connector-polkadot

Process completed with exit code 1.

cpl-connector-corda

Process completed with exit code 1.

compute_changed_packages

The following actions use a deprecated Node.js version and will be forced to run on node20: dorny/paths-filter@v2.11.1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

ce-carbon-accounting-frontend

No files were found with the provided path: ./code-coverage-ts/**/. No artifacts will be uploaded.

ce-supply-chain-frontend

No files were found with the provided path: ./code-coverage-ts/**/. No artifacts will be uploaded.

Artifacts

Produced during runtime

Name	Size
coverage-reports-1	268 KB
coverage-reports-10	1.87 MB
coverage-reports-11	1.15 MB
coverage-reports-13	256 KB
coverage-reports-14	1.36 MB
coverage-reports-15	787 KB
coverage-reports-16	788 KB
coverage-reports-17	606 KB
coverage-reports-18	253 KB
coverage-reports-19	260 KB
coverage-reports-2	817 KB
coverage-reports-20	317 KB
coverage-reports-21	273 KB
coverage-reports-22	272 KB
coverage-reports-23	636 KB
coverage-reports-24	1.15 MB
coverage-reports-27	625 KB
coverage-reports-28	925 KB
coverage-reports-3	523 KB
coverage-reports-30	797 KB
coverage-reports-31	819 KB
coverage-reports-32	644 KB
coverage-reports-33	751 KB
coverage-reports-34	912 KB
coverage-reports-35	253 KB
coverage-reports-36	1.74 MB
coverage-reports-37	1.28 MB
coverage-reports-38	791 KB
coverage-reports-39	443 KB
coverage-reports-4	93.8 KB
coverage-reports-40	439 KB
coverage-reports-41	1.22 MB
coverage-reports-42	1.22 MB
coverage-reports-43	1.35 MB
coverage-reports-44	1 MB
coverage-reports-45	430 KB
coverage-reports-46	735 KB
coverage-reports-47	1.39 MB
coverage-reports-5	193 KB
coverage-reports-6	146 KB
coverage-reports-7	1.26 MB
coverage-reports-8	249 KB
coverage-reports-cpp-fabric	972 KB