Skip to content

Test CI Improvements - #117

Open
jkondrat wants to merge 1 commit into
mainfrom
feat/ci-improvements-test
Open

jkondrat wants to merge 1 commit into
mainfrom
feat/ci-improvements-test

Conversation

@jkondrat

Copy link
Copy Markdown
Collaborator

DO NOT MERGE: testing the CI output/PR comments functionality

@github-actions

Copy link
Copy Markdown

🔍 InfraScan: C (70.7%)

Category Grade Findings
Overall C (70.7%) 🔴 12 critical, 92 high, 195 medium
Security D (63.0%) 104 medium
Cost D (64.5%) 8 high, 20 medium
Containers C (84.9%) 🔴 12 critical, 84 high, 71 medium
Baseline This PR Delta
Infra cost $4,625/mo $11,707/mo +$7,083/mo ⚠️ (+153.1%)

New findings (261)

Severity Rule File Description
🔴 CRITICAL CVE-2020-15999 test-fixtures/docker-compose.yml:15 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.1
🔴 CRITICAL CVE-2018-1000517 test-fixtures/docker-compose.yml:15 BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c
🔴 CRITICAL CVE-2022-37434 test-fixtures/docker-compose.yml:15 zlib through 1.2.12 has a heap-based buffer over-read or buffer overfl
🔴 CRITICAL CVE-2019-12900 test-fixtures/docker-compose.yml:15 No description available
🔴 CRITICAL CVE-2024-5535 test-fixtures/docker-compose.yml:15 Issue summary: Calling the OpenSSL API function SSL_select_next_proto
🔴 CRITICAL CVE-2019-11068 test-fixtures/docker-compose.yml:15 No description available
🔴 CRITICAL CVE-2019-6978 test-fixtures/docker-compose.yml:15 No description available
🔴 CRITICAL CVE-2022-48174 test-fixtures/docker-compose.yml:15 There is a stack overflow vulnerability in ash.c:6030 in busybox befor
🔴 CRITICAL CVE-2022-27404 test-fixtures/docker-compose.yml:15 FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovere
🔴 CRITICAL CVE-2019-14697 test-fixtures/docker-compose.yml:15 No description available

… and 251 more findings — see full report

→ Full report in Actions summary

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant