chore(deps): Bump the minor-and-patch group across 1 directory with 4 updates #856
dependabot[bot]security-scans.yaml
on: pull_request
dependency-review
8s
trivy-scan
1m 43s
codeql
59s
hadolint
10s
Annotations
10 errors and 1 warning
|
hadolint:
mcp/appworld_apis/Dockerfile#L28
DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L28
DL3042 warning: Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L17
DL3009 info: Delete the apt lists (/var/lib/apt/lists) after installing something
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L17
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L17
DL3042 warning: Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`
|
|
hadolint:
a2a/weather_service/Dockerfile#L5
DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
hadolint:
a2a/exgentic_agent/Dockerfile#L43
DL3059 info: Multiple consecutive `RUN` instructions. Consider consolidation.
|
|
hadolint:
a2a/exgentic_agent/Dockerfile#L15
DL3015 info: Avoid additional packages by specifying `--no-install-recommends`
|
|
hadolint:
a2a/exgentic_agent/Dockerfile#L15
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
hadolint:
a2a/claude_agent/Dockerfile#L7
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
codeql
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|