Bump actions/attest-build-provenance from 2.2.3 to 4.1.0 #8
Annotations
4 warnings
|
Bandit security scan
services/quarantine/quarantine/watcher.py:178: [MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
|
|
Bandit security scan
services/quarantine/quarantine/pipeline.py:1437: [MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
|
|
Bandit security scan
services/agent/agent/sandbox.py:403: [MEDIUM] Probable insecure usage of temp file/directory.
|
|
Bandit security scan
services/agent/agent/app.py:555: [MEDIUM] Chmod setting a permissive mask 0o660 on file (sock_path).
|
Loading