Security

chore(deps): bump go.step.sm/crypto from 0.54.0 to 0.57.0 #399

Sign in to view logs

Triggered via pull request January 28, 2025 04:38

dependabot[bot]

opened #300

dependabot/go_modules/go.step.sm/crypto-0.57.0

Status Success

Total duration 41s

Artifacts –

security.yml

on: pull_request

Static analysis (semgrep)

Annotations

2 errors and 3 warnings

Trivy scanner

CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/

Static analysis (semgrep)

CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/

Nancy scanner

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

Static analysis (semgrep)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

Static analysis (semgrep)

Unexpected input(s) 'generateSarif', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']