Security Scans

build(deps): bump the minor-and-patch group across 1 directory with 5 updates #682

Sign in to view logs

Triggered via pull request July 20, 2026 17:31

dependabot[bot]

opened #487

dependabot/github_actions/minor-and-patch-e30cd39792

Status Success

Total duration 13m 8s

Artifacts –

security-scans.yaml

on: pull_request

Dependency Review

Shell Script Lint

Helm Chart Lint

Dockerfile Lint (Hadolint)

Trivy Filesystem Scan

CodeQL Analysis (Go)

Verify Action Pinning

Annotations

9 warnings

Verify Action Pinning

Found actions not pinned to SHA commits:

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentcards.yaml#L399

399:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentcards.yaml#L387

387:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentruntimes.yaml#L448

448:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_agentruntimes.yaml#L436

436:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_authorizationpolicies.yaml#L111

111:151 [line-length] line too long (162 > 150 characters)

YAML Lint: charts/operator/crds/agent.rossoctl.dev_authorizationpolicies.yaml#L99

99:151 [line-length] line too long (162 > 150 characters)

YAML Lint: .github/workflows/project.yml#L23

23:1 [empty-lines] too many blank lines (1 > 0)

CodeQL Analysis (Go)

1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.