ci(deps): bump firestoned/github-actions/security/cosign-sign from 1.3.6 to 1.3.7 #252
dependabot[bot]build.yaml
on: pull_request
🔐 Verify Signed Commits
16s
⚖️ Verify SPDX License Headers
5s
🧾 Validate VEX Statements
5s
🔏 Validate Auto-VEX Sign-off
2m 37s
🛡️ Security Vulnerability Scan
35s
🏗️ IaC Security Scan (Trivy config)
22s
🧪 cargo-deny (License + Advisory + Sources)
29s
Matrix: build
📎 Clippy
1m 52s
Matrix: ✍️ Sign Binary Artifacts
Matrix: docker
Matrix: grype-triage
Matrix: attest
Matrix: grype
🚀 Upload Release Assets
0s
Annotations
1 error and 13 warnings
|
🛡️ Security Vulnerability Scan
Process completed with exit code 1.
|
|
🛡️ Security Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
📎 Clippy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Validate Auto-VEX Sign-off
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux ARM64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux x86_64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🧪 Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🐳 Build and Push Docker Image - Chainguard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Variables should be defined before their use:
Dockerfile.chainguard#L40
UndefinedVar: Usage of undefined variable '$BASE_IMAGE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
🐳 Build and Push Docker Image - Distroless
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Attest Docker Image - Chainguard
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Chainguard
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
🔏 Attest Docker Image - Distroless
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Distroless
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
5spot-linux-amd64
Expired
|
13.1 MB |
sha256:4bd2e4ba8980f34b8e8e2b26ac3b299563cdc3170b340c34e8c043c6bbb7cac1
|
|
|
5spot-linux-arm64
Expired
|
12.6 MB |
sha256:d52aaae12c90d690126326c3995bc91a7ace5c7588b50c381b3afb66e8772923
|
|
|
cargo-audit-report
|
1.04 KB |
sha256:f84d7c1308d83fecf230ab5653a12ce1ebf814350a7ab9878cd6dad178503a14
|
|
|
finos~5-spot~10UHXG.dockerbuild
|
76.1 KB |
sha256:1c354af90177e2835806cf44329aff6131d2610b415af943bf85797cdc1b32fc
|
|
|
finos~5-spot~F5HBPA.dockerbuild
|
97.1 KB |
sha256:145bbeb507f9ed5527fee47d4c674c02149cf2f042e36d3da4f5f76e74e04645
|
|
|
grype-pull_request-Chainguard-252
|
385 Bytes |
sha256:7673df6fa8af6426527c27882298c043e9f2df0232515a3909f1584fba4d6cac
|
|
|
grype-pull_request-Distroless-252
|
3.72 KB |
sha256:3dfde337f743c520b8567820acfb306a100073aab13f4b8222d3e76a29ee51af
|
|