security: add tag ancestry verification to release workflows #5954
zackverhampull-request.yaml
on: pull_request
detect-changes
4s
lint
/
lint
1m 49s
Matrix: agent / native
Matrix: vscode / native
generate-licenses
/
license-check
1m 9s
Matrix: e2e / cypress
upload
/
upload
1m 7s
Annotations
4 warnings
|
Sensitive data should not be used in the ARG or ENV commands:
test/e2e/Dockerfile.base#L123
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "GH_DOWNLOAD_TOKEN")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
test/e2e/Dockerfile.base#L113
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "GH_DOWNLOAD_TOKEN")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
e2e / e2e (preview):
test/e2e/tests/workbench/positron/deployments.cy.js#L53
Unexpected pending mocha test
|
|
e2e / e2e (preview):
test/e2e/tests/deployments.cy.js#L61
Unexpected pending mocha test
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
posit-dev~publisher~25R86B.dockerbuild
|
32.4 KB |
sha256:36e668a50815dd9966571047230ce943c50249822ce188c5f37cac3640c0e49b
|
|