Skip to content

Mask GitHub API keys by default in api-keys CLI #218

Mask GitHub API keys by default in api-keys CLI

Mask GitHub API keys by default in api-keys CLI #218

Triggered via pull request July 2, 2026 18:52
Status Success
Total duration 15m 16s
Artifacts 4

build_docker.yml

on: pull_request
End-to-end test (Docker)
15m 12s
End-to-end test (Docker)
Test on macOS
3m 28s
Test on macOS
End-to-end test (Podman)
12m 35s
End-to-end test (Podman)
Matrix: Push image
Fit to window
Zoom out
Zoom in

Annotations

8 warnings and 1 notice
Test on macOS
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/setup-python@v5, astral-sh/setup-uv@v6. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Test on macOS
Restore cache failed: Dependencies file is not found in /Users/runner/work/CollectOSS/CollectOSS. Supported file pattern: go.sum
End-to-end test (Podman)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, redhat-actions/buildah-build@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
End-to-end test (Docker)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, docker/setup-compose-action@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals: docker/backend/Dockerfile#L118
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
Sensitive data should not be used in the ARG or ENV commands: docker/rabbitmq/Dockerfile#L12
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "RABBIT_MQ_DEFAULT_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Variables should be defined before their use: docker/keyman/Dockerfile#L18
UndefinedVar: Usage of undefined variable '$PYTHONPATH' More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
Sensitive data should not be used in the ARG or ENV commands: docker/database/Dockerfile#L16
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "POSTGRES_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Test on macOS
The macos-latest label will migrate to macOS 26 beginning June 15, 2026. For more information see https://github.com/actions/runner-images/issues/14167

Artifacts

Produced during runtime
Name Size Digest
chaoss~CollectOSS~8QPYJC.dockerbuild
31.2 KB
sha256:ce30f27e29c1cbfc9c4cc34b80f2dbe8f195e86756f307acb0103ac78a396736
chaoss~CollectOSS~EZAS7H.dockerbuild
113 KB
sha256:075dd55ad70bbfd66c5676e71aff27c6b666b71bc42b1344390f05740e7e4188
chaoss~CollectOSS~LPKMP5.dockerbuild
35.1 KB
sha256:bd1fc0271885894e44b711d4c19fa69f8451775140233206ac9d8cdf4821d528
chaoss~CollectOSS~TLXXWU.dockerbuild
36.2 KB
sha256:6ad25b48f1134882161a71be5cec48ee136755c08e027b92c637c4b980f6fd25