Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix scorecard issues #518

Closed
wants to merge 9 commits into from
Closed

Fix scorecard issues #518

wants to merge 9 commits into from

Conversation

bcodesido
Copy link
Member

@bcodesido bcodesido commented Aug 20, 2024 •
edited
Loading

Fixes
Token-Permissions

  • Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci.yml:12
  • Warn: no topLevel permission defined: .github/workflows/codeql.yml:1
  • Warn: no topLevel permission defined: .github/workflows/deploy-dev.yml:1

Pinned-Dependencies

  • Warn: containerImage not pinned by hash: docker-compose/bitcoind/Dockerfile:1
  • Warn: containerImage not pinned by hash: docker-compose/lbc-deployer/Dockerfile:1
  • Warn: containerImage not pinned by hash: docker-compose/localstack/Dockerfile:1
  • Warn: containerImage not pinned by hash: docker-compose/lps/Dockerfile:4
  • Warn: containerImage not pinned by hash: docker-compose/lps/Dockerfile:18
  • Warn: containerImage not pinned by hash: docker-compose/powpeg/pegin/Dockerfile:1
  • Warn: containerImage not pinned by hash: docker-compose/powpeg/pegin/Dockerfile:25
  • Warn: containerImage not pinned by hash: docker-compose/powpeg/pegout/Dockerfile:1
  • Warn: containerImage not pinned by hash: docker-compose/powpeg/pegout/Dockerfile:25
  • Warn: containerImage not pinned by hash: docker-compose/rskj/Dockerfile:1
  • Warn: containerImage not pinned by hash: docker-compose/rskj/Dockerfile:28
  • Warn: npmCommand not pinned by hash: docker-compose/lbc-deployer/Dockerfile:5

@bcodesido bcodesido force-pushed the fix_scorecard_issues branch from 9f206e0 to 842818b Compare August 20, 2024 20:05
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@bcodesido bcodesido closed this Jan 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@bcodesido