fix: address GitHub security findings (CodeQL #38/#40, Dependabot #20… #181
cawalchsecurity.yml
on: push
govulncheck (Go)
25s
npm audit (puppeteer-worker)
16s
Trivy FS (merrymaker-go)
22s
Trivy FS (puppeteer-worker)
16s
Matrix: codeql
Annotations
10 errors and 1 warning
|
govulncheck (Go)
Process completed with exit code 3.
|
|
govulncheck (Go)
http.WriteError calls x509.HostnameError.Error
|
|
govulncheck (Go)
cryptoutil.AESGCMEncryptor.Encrypt calls io.ReadFull, which eventually calls x509.Certificate.VerifyHostname
|
|
govulncheck (Go)
cryptoutil.AESGCMEncryptor.Encrypt calls io.ReadFull, which eventually calls x509.Certificate.Verify
|
|
govulncheck (Go)
workflowtest.HTTPClient.FailJob calls io.ReadAll, which eventually calls textproto.Reader.ReadMIMEHeader
|
|
CodeQL (go)
Canceling since a higher priority waiting request for security-refs/heads/main exists
|
|
CodeQL (go)
The operation was canceled.
|
|
CodeQL (javascript-typescript)
Canceling since a higher priority waiting request for security-refs/heads/main exists
|
|
CodeQL (javascript-typescript)
The operation was canceled.
|
|
Security Scanning
Canceling since a higher priority waiting request for security-refs/heads/main exists
|
|
CodeQL (go)
Restore cache failed: Dependencies file is not found in /home/runner/work/mmk-ui-api/mmk-ui-api. Supported file pattern: go.mod
|