22.Build and Push Tools Images

Merge pull request #3928 from bcgov/renovate/actions-checkout-digest #17

Sign in to view logs

Triggered via push October 7, 2024 23:10

junminahn

main

Status Success

Total duration 1m 27s

Artifacts 3

build-push-tools.yml

on: push

build-push-airflow

build-push-sonarscan

Annotations

10 warnings

Sensitive data should not be used in the ARG or ENV commands: tools/sonarscan/Dockerfile#L11

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "GH_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L12

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L13

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L11

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L14

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L15

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Sensitive data should not be used in the ARG or ENV commands: tools/sonarscan/Dockerfile#L15

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "SONARQUBE_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L16

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Legacy key/value format with whitespace separator should not be used: tools/sonarscan/Dockerfile#L17

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Legacy key/value format with whitespace separator should not be used: tools/zap/Dockerfile#L15

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Artifacts

Produced during runtime

Name	Size
bcgov~platform-services-registry~BQ75VV.dockerbuild	20.2 KB
bcgov~platform-services-registry~LFKJS3.dockerbuild	11.7 KB
bcgov~platform-services-registry~Z2HD9Q.dockerbuild	25.8 KB