Security Scans

build(deps): bump the minor-and-patch group across 1 directory with 2 updates #686

Sign in to view logs

Triggered via pull request July 21, 2026 00:24

dependabot[bot]

opened #491

dependabot/go_modules/operator/minor-and-patch-3bc5c59e6c

Status Success

Total duration 3m 40s

Artifacts –

security-scans.yaml

on: pull_request

Dependency Review

Shell Script Lint

Helm Chart Lint

Dockerfile Lint (Hadolint)

Trivy Filesystem Scan

CodeQL Analysis (Go)

Verify Action Pinning

Annotations

9 warnings

Verify Action Pinning

Found actions not pinned to SHA commits:

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentcards.yaml#L399

399:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentcards.yaml#L387

387:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentruntimes.yaml#L448

448:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentruntimes.yaml#L436

436:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_authorizationpolicies.yaml#L111

111:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_authorizationpolicies.yaml#L99

99:151 [line-length] line too long (162 > 150 characters)

YAML Lint: .github/workflows/project.yml#L23

23:1 [empty-lines] too many blank lines (1 > 0)

CodeQL Analysis (Go)

1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.