[Snyk] Security upgrade protobufjs from 8.0.1 to 8.6.6 #37
VaniHaripriyae2e-test-frontend.yml
on: pull_request
Matrix: build / image-build
Matrix: frontend-integration-test
Annotations
34 warnings
|
build / image-build (metadata-writer, backend/metadata_writer/Dockerfile, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals:
backend/metadata_writer/Dockerfile#L6
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals
More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
|
|
build / image-build (metadata-envoy, third_party/metadata_envoy/Dockerfile, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build / image-build (scheduledworkflow, backend/Dockerfile.scheduledworkflow, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals:
backend/Dockerfile.scheduledworkflow#L61
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals
More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
|
|
build / image-build (launcher, backend/Dockerfile.launcher, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build / image-build (persistenceagent, backend/Dockerfile.persistenceagent, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build / image-build (viewer-crd-controller, backend/Dockerfile.viewercontroller, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals:
backend/Dockerfile.viewercontroller#L43
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals
More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
|
|
Legacy key/value format with whitespace separator should not be used:
backend/Dockerfile.viewercontroller#L41
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
|
Legacy key/value format with whitespace separator should not be used:
backend/Dockerfile.viewercontroller#L40
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
|
The 'as' keyword should match the case of the 'from' keyword:
backend/Dockerfile.viewercontroller#L15
FromAsCasing: 'as' and 'FROM' keywords' casing do not match
More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/
|
|
build / image-build (apiserver, backend/Dockerfile, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Variables should be defined before their use:
backend/Dockerfile#L35
UndefinedVar: Usage of undefined variable '$SOURCE_CODE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
Variables should be defined before their use:
backend/Dockerfile#L30
UndefinedVar: Usage of undefined variable '$SOURCE_CODE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
Variables should be defined before their use:
backend/Dockerfile#L29
UndefinedVar: Usage of undefined variable '$SOURCE_CODE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
Variables should be defined before their use:
backend/Dockerfile#L28
UndefinedVar: Usage of undefined variable '$SOURCE_CODE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
Variables should be defined before their use:
backend/Dockerfile#L27
UndefinedVar: Usage of undefined variable '$SOURCE_CODE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
build / image-build (driver, backend/Dockerfile.driver, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build / image-build (cache-deployer, backend/src/cache/deployer/Dockerfile, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build / image-build (frontend, frontend/Dockerfile, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Legacy key/value format with whitespace separator should not be used:
frontend/Dockerfile#L41
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
|
Relative workdir without an absolute workdir declared within the build can have unexpected results if the base image changes:
frontend/Dockerfile#L13
WorkdirRelativePath: Relative workdir "./src" can have unexpected results if the base image changes
More info: https://docs.docker.com/go/dockerfile/rule/workdir-relative-path/
|
|
Default value for global ARG results in an empty or invalid base image name:
frontend/Dockerfile#L29
InvalidDefaultArgInFrom: Default value for ARG node:${NODE_VERSION}-${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Default value for global ARG results in an empty or invalid base image name:
frontend/Dockerfile#L4
InvalidDefaultArgInFrom: Default value for ARG node:${NODE_VERSION}-slim results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals:
frontend/Dockerfile#L42
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals
More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
|
|
build / image-build (visualization-server, backend/Dockerfile.visualization, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Legacy key/value format with whitespace separator should not be used:
backend/Dockerfile.visualization#L37
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
|
build / image-build (cache-server, backend/Dockerfile.cacheserver, .)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@v6, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
The 'as' keyword should match the case of the 'from' keyword:
backend/Dockerfile.cacheserver#L16
FromAsCasing: 'as' and 'FROM' keywords' casing do not match
More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/
|
|
Frontend Integration Tests - K8s v1.31.14 pod_to_pod_tls_enabled=false
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Frontend Integration Tests - K8s v1.35.0 pod_to_pod_tls_enabled=true
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Frontend Integration Tests - K8s v1.35.0 pod_to_pod_tls_enabled=false
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Frontend Integration Tests - K8s v1.31.14 pod_to_pod_tls_enabled=true
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
apiserver
Expired
|
106 MB |
sha256:8c354f0515a2873ac120b2110d5fd7ee060b38b9564f9b5f3c77374a822f525c
|
|
|
cache-deployer
Expired
|
321 MB |
sha256:a6e0931726ae4214c2d5e7afe9b21c11d4c72e54e4b36633039f0cb2d90480d9
|
|
|
cache-server
Expired
|
34.5 MB |
sha256:f04b38021de752021f5f3b82fb7fc0396b9007121f8e4b1d48ab5bd6ed2e0cf6
|
|
|
driver
Expired
|
88.9 MB |
sha256:ceee9b7b062fb831976fc2e2c89571a4cac0fb74d02b37917a039920a8efa279
|
|
|
frontend
Expired
|
162 MB |
sha256:f673a74a2206c52a33307dc7fa3f80cc693e8b6661519eed606ff23b46502931
|
|
|
kfp-frontend-integration-test-artifacts-k8s-v1.31.14 pod_to_pod_tls_enabled=false
|
25.4 KB |
sha256:74861337e1ba75dce0feeed26e6c1b5c8df352895250536487b166eb2bc81bae
|
|
|
kfp-frontend-integration-test-artifacts-k8s-v1.31.14 pod_to_pod_tls_enabled=true
|
26.8 KB |
sha256:41ad91ace16124893b68fb290f88afae4650e1f1df10ea2bf4f7011bb6acb05d
|
|
|
kfp-frontend-integration-test-artifacts-k8s-v1.35.0 pod_to_pod_tls_enabled=false
|
25.4 KB |
sha256:da8c245b08253285eaa8d3c219367818ec8c4f1158b54381d89380fbf509693e
|
|
|
kfp-frontend-integration-test-artifacts-k8s-v1.35.0 pod_to_pod_tls_enabled=true
|
26.1 KB |
sha256:1621cbc93daf79559d3bc4250262ea6386c8ce4e6a9bfe62fef0ca28a9933176
|
|
|
launcher
Expired
|
86.6 MB |
sha256:14f8f5a50a61812d12feb2f9b7ac8fd9c151a96123fd60b98587572eeda32045
|
|
|
metadata-envoy
Expired
|
128 MB |
sha256:fda88d649b02a42bf262622859c89db51e2f87400cfa3cd3bfd6dc4314357a4a
|
|
|
metadata-writer
Expired
|
87.2 MB |
sha256:b853293992e9bf0d9042889126fd0ac5a57ba1413504d7b7453171ac1c967a80
|
|
|
persistenceagent
Expired
|
67.6 MB |
sha256:5d8a0e1aa2ace0ff15db8cea9ea862f8a71ecf1151ca09c0239c02088040d109
|
|
|
scheduledworkflow
Expired
|
81.7 MB |
sha256:072c72b723345f7ed2bf5a3fdb1978cb548cac971451f3be5c7f78f1fbfd348a
|
|
|
viewer-crd-controller
Expired
|
27.6 MB |
sha256:bcdef13ae800b1bb54a07a0b5a976d9146747f94e9d8d808a73fdda904e92a31
|
|
|
visualization-server
Expired
|
952 MB |
sha256:be1cbbe98c2346a80ed349e6539c79311b931039cbb1559e4cdf471db9c8f321
|
|