Mask GitHub API keys by default in api-keys CLI #218
build_docker.yml
on: pull_request
End-to-end test (Docker)
15m 12s
Test on macOS
3m 28s
End-to-end test (Podman)
12m 35s
Matrix: Push image
Annotations
8 warnings and 1 notice
|
Test on macOS
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/setup-python@v5, astral-sh/setup-uv@v6. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Test on macOS
Restore cache failed: Dependencies file is not found in /Users/runner/work/CollectOSS/CollectOSS. Supported file pattern: go.sum
|
|
End-to-end test (Podman)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, redhat-actions/buildah-build@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
End-to-end test (Docker)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, docker/setup-compose-action@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals:
docker/backend/Dockerfile#L118
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals
More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
|
|
Sensitive data should not be used in the ARG or ENV commands:
docker/rabbitmq/Dockerfile#L12
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "RABBIT_MQ_DEFAULT_PASSWORD")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Variables should be defined before their use:
docker/keyman/Dockerfile#L18
UndefinedVar: Usage of undefined variable '$PYTHONPATH'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
Sensitive data should not be used in the ARG or ENV commands:
docker/database/Dockerfile#L16
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "POSTGRES_PASSWORD")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Test on macOS
The macos-latest label will migrate to macOS 26 beginning June 15, 2026. For more information see https://github.com/actions/runner-images/issues/14167
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
chaoss~CollectOSS~8QPYJC.dockerbuild
|
31.2 KB |
sha256:ce30f27e29c1cbfc9c4cc34b80f2dbe8f195e86756f307acb0103ac78a396736
|
|
|
chaoss~CollectOSS~EZAS7H.dockerbuild
|
113 KB |
sha256:075dd55ad70bbfd66c5676e71aff27c6b666b71bc42b1344390f05740e7e4188
|
|
|
chaoss~CollectOSS~LPKMP5.dockerbuild
|
35.1 KB |
sha256:bd1fc0271885894e44b711d4c19fa69f8451775140233206ac9d8cdf4821d528
|
|
|
chaoss~CollectOSS~TLXXWU.dockerbuild
|
36.2 KB |
sha256:6ad25b48f1134882161a71be5cec48ee136755c08e027b92c637c4b980f6fd25
|
|