Bump actions/attest-build-provenance from 2.2.3 to 4.1.0 - #8

Closed

dependabot[bot] wants to merge 1 commit into

dependabot/github_actions/actions/attest-build-provenance-4.1.0

Annotations

4 warnings

services/quarantine/quarantine/watcher.py:178: [MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.

services/quarantine/quarantine/pipeline.py:1437: [MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.

services/agent/agent/sandbox.py:403: [MEDIUM] Probable insecure usage of temp file/directory.

services/agent/agent/app.py:555: [MEDIUM] Chmod setting a permissive mask 0o660 on file (sock_path).

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump actions/attest-build-provenance from 2.2.3 to 4.1.0 - #8

Bump actions/attest-build-provenance from 2.2.3 to 4.1.0#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/attest-build-provenance-4.1.0

Uh oh!

Annotations

The logs for this run have expired and are no longer available.

Re-running jobs...