Skip to content

Merge pull request #636 from thijsvanloef/dependabot/npm_and_yarn/doc… #770

Merge pull request #636 from thijsvanloef/dependabot/npm_and_yarn/doc…

Merge pull request #636 from thijsvanloef/dependabot/npm_and_yarn/doc… #770

Triggered via push December 17, 2024 14:32
Status Success
Total duration 2m 9s
Artifacts 1

security.yml

on: push
Container - Scan
1m 57s
Container - Scan
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
Container - Scan
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L89
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "SERVER_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L89
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "ADMIN_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Artifacts

Produced during runtime
Name Size
thijsvanloef~palworld-server-docker~XSUQFG.dockerbuild
57.3 KB