update: Update anchore/sbom-action to v0.15.1 #4672
Starkteetje
This run and associated checks have been archived and are scheduled for deletion.
Learn more about checks retention
cicd.yaml
on: push
conditionals
0s
build
/
context
7s
compliance
/
ossf-scorecard
0s
compliance
/
dependency review
0s
compliance
/
check-commit-message
0s
sast
/
codeql
2m 55s
sast
/
black
7s
sast
/
pylint
29s
sast
/
bandit
27s
sast
/
hadolint
21s
sast
/
kubelinter
16s
sast
/
trivy config
32s
sast
/
checkov
36s
sast
/
semgrep
34s
unit-test
/
pytest
44s
docs
/
deploy
14s
sca
/
safety
10s
sca
/
trivy image
36s
sca
/
grype
51s
sca
/
...
/
dependency review
12s
Matrix: integration-test / functional
Matrix: integration-test / k8s versions
Matrix: integration-test / optional
Matrix: integration-test / self-hosted-notary
Annotations
10 errors and 1 warning
|
sast / checkov:
deployment/deployment.yaml#L3
CKV_K8S_21: "The default namespace should not be used"
|
|
sast / checkov:
deployment/deployment.yaml#L27
CKV_K8S_21: "The default namespace should not be used"
|
|
sast / checkov:
deployment/deployment.yaml#L44
CKV_K8S_21: "The default namespace should not be used"
|
|
sast / checkov:
deployment/deployment.yaml#L59
CKV_K8S_21: "The default namespace should not be used"
|
|
sast / checkov:
deployment/deployment.yaml#L121
CKV_K8S_21: "The default namespace should not be used"
|
|
sast / checkov:
deployment/deployment.yaml#L143
CKV_K8S_49: "Minimize wildcard use in Roles and ClusterRoles"
|
|
sast / checkov:
deployment/deployment.yaml#L181
CKV_K8S_21: "The default namespace should not be used"
|
|
sast / checkov:
deployment/deployment.yaml#L203
CKV_K8S_15: "Image Pull Policy should be Always"
|
|
sast / checkov:
deployment/deployment.yaml#L203
CKV_K8S_29: "Apply security context to your pods and containers"
|
|
sast / checkov:
deployment/deployment.yaml#L203
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
sca / grype
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
cosign.pub
Expired
|
178 Bytes |
|
|
sbom.cdx
Expired
|
522 KB |
|
|
sse-secure-systems-connaisseur_sha-febb36f.cyclonedx.json
Expired
|
522 KB |
|