Skip to content

[BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants #38962

[BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants

[BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants #38962

Triggered via pull request June 26, 2026 16:09
Status Failure
Total duration 16m 57s
Artifacts 47

build.yml

on: pull_request
Matrix: Build Docker images
Matrix: Build Chainguard Docker images
Matrix: Build MSSQL migrator utility
Upload
1m 42s
Upload
Trigger Bitwarden lite build
0s
Trigger Bitwarden lite build
Trigger K8s deploy
0s
Trigger K8s deploy
Fit to window
Zoom out
Zoom in

Annotations

12 errors and 338 warnings
Build Chainguard Docker images (Attachments, ./util)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Admin, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (EventsProcessor, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-runtime-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (MsSqlMigratorUtility, ./util)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-runtime-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Sso, ./bitwarden_license/src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Scim, ./bitwarden_license/src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Billing, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Notifications, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Events, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-runtime-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Icons, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-runtime-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Identity, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build Chainguard Docker images (Api, ./src)
buildx failed with: ERROR: failed to build: failed to solve: failed to fetch anonymous token: unexpected status from GET request to https://cgr.dev/token?scope=repository%3Abitwarden.com%2Fdotnet-sdk-fips%3Apull&service=cgr.dev: 401 Unauthorized
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/CoreHelpers.cs#L352
The behavior of 'double.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'double.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (linux-x64): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (linux-x64): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (linux-x64): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (osx-x64): src/Core/Dirt/Repositories/TableStorage/EventRepository.cs#L189
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/Dirt/Repositories/TableStorage/EventRepository.cs#L189
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/Services/Implementations/UserService.cs#L738
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'UserService.RecoverTwoFactorAsync(User, string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (osx-x64): src/Core/Models/Mail/BaseMailModel.cs#L26
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (osx-x64): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (osx-x64): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (win-x64): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (win-x64): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (win-x64): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (win-x64): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (win-x64): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (win-x64): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (win-x64): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (win-x64): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build MSSQL migrator utility (win-x64): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build MSSQL migrator utility (win-x64): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Nginx, ./util)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Nginx, ./util)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Attachments, ./util)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Attachments, ./util)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Attachments, ./util)
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Attachments, ./util)
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Attachments, ./util)
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Attachments, ./util)
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Attachments, ./util)
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Attachments, ./util)
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSql, ./util)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (MsSql, ./util)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Setup, ./util, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Setup, ./util, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Setup, ./util, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true): src/Core/AdminConsole/OrganizationFeatures/OrganizationDomains/VerifyOrganizationDomainCommand.cs#L153
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true): src/Core/AdminConsole/OrganizationFeatures/OrganizationDomains/VerifyOrganizationDomainCommand.cs#L153
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true): src/Core/Dirt/Repositories/TableStorage/EventRepository.cs#L189
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true): src/Core/Dirt/Repositories/TableStorage/EventRepository.cs#L189
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Setup, ./util, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Setup, ./util, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (MsSqlMigratorUtility, ./util, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'RegisterVerifyEmail.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'VerifyDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.Format(string, object, object, object)' could vary based on the current user's locale settings. Replace this call in 'VerifyEmailModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'OrganizationInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/CoreHelpers.cs#L352
The behavior of 'double.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'double.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/AdminConsole/OrganizationFeatures/Policies/PolicyEventHandlers/FreeFamiliesForEnterprisePolicyEventHandler.cs#L39
The behavior of 'DateTime.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'FreeFamiliesForEnterprisePolicyEventHandler.NotifiesUserWithApplicablePoliciesAsync(PolicyUpdate)' with a call to 'DateTime.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (MsSqlMigratorUtility, ./util, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Icons, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Icons, ./src, true)
The behavior of 'DateTime.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'FreeFamiliesForEnterprisePolicyEventHandler.NotifiesUserWithApplicablePoliciesAsync(PolicyUpdate)' with a call to 'DateTime.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true)
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true): src/Core/Utilities/CoreHelpers.cs#L352
The behavior of 'double.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'double.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Icons, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Icons, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (EventsProcessor, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (EventsProcessor, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'HandlebarsMailService.SendUpdatedOrganizationInviteEmailsAsync(OrganizationInvitesInfo)' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'HandlebarsMailService.SendFailedTwoFactorAttemptEmailAsync(string, TwoFactorProviderType, DateTime, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, params object[])' could vary based on the current user's locale settings. Replace this call in 'I18nService.Translate(string, params object[])' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (EventsProcessor, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (EventsProcessor, ./src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (EventsProcessor, ./src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/Models/Mail/BaseMailModel.cs#L26
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (EventsProcessor, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (EventsProcessor, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Identity, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Identity, ./src, true)
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true)
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true): src/Core/Utilities/CoreHelpers.cs#L352
The behavior of 'double.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'double.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Identity, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Identity, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Scim, ./bitwarden_license/src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'VerifyDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, object, object, object)' could vary based on the current user's locale settings. Replace this call in 'VerifyEmailModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'OrganizationInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'UserService.RecoverTwoFactorAsync(User, string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Scim, ./bitwarden_license/src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Sso, ./bitwarden_license/src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Notifications, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Notifications, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true): src/Core/AdminConsole/OrganizationFeatures/OrganizationDomains/VerifyOrganizationDomainCommand.cs#L153
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true): src/Core/AdminConsole/OrganizationFeatures/OrganizationDomains/VerifyOrganizationDomainCommand.cs#L153
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true): src/Core/Models/Mail/BaseMailModel.cs#L26
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Notifications, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Notifications, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Billing, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Billing, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Billing, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Billing, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Events, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Events, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true)
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'UserService.RecoverTwoFactorAsync(User, string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true): src/Core/Utilities/CoreHelpers.cs#L352
The behavior of 'double.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'double.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Events, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Events, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Api, ./src, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Api, ./src, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'VerifyOrganizationDomainCommand.SendVerifiedDomainUserEmailAsync(OrganizationDomain)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true)
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true): src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true): src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true): src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true): src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true): src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true): src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true): src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Api, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Api, ./src, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UserService.ToggleNewDeviceVerificationException(Guid)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UserService.ActiveNewDeviceVerificationException(Guid)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'UserService.RecoverTwoFactorAsync(User, string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Models/Mail/BaseMailModel.cs#L26
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Services/Implementations/UserService.cs#L1135
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UserService.ToggleNewDeviceVerificationException(Guid)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Services/Implementations/UserService.cs#L1128
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UserService.ActiveNewDeviceVerificationException(Guid)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Services/Implementations/UserService.cs#L738
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'UserService.RecoverTwoFactorAsync(User, string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (SeederApi, ./util, linux/amd64,linux/arm64, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Admin, ./src, true, true)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Docker images (Admin, ./src, true, true)
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'int.ToString()' could vary based on the current user's locale settings. Replace this call in 'BaseMailModel.CurrentYear.get' with a call to 'int.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Admin, ./src, true, true)
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Admin, ./src, true, true): src/Core/Services/Implementations/UserService.cs#L1128
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UserService.ActiveNewDeviceVerificationException(Guid)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/Services/Implementations/UserService.cs#L738
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'UserService.RecoverTwoFactorAsync(User, string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Admin, ./src, true, true): src/Core/Dirt/Repositories/TableStorage/EventRepository.cs#L189
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/Dirt/Repositories/TableStorage/EventRepository.cs#L189
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'EventRepository.GetManyAsync(string, string, DateTime, DateTime, PageOptions)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/Models/Mail/Provider/ProviderInitiateDeleteModel.cs#L8
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderInitiateDeleteModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/Models/Mail/Provider/ProviderSetupInviteViewModel.cs#L11
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderSetupInviteViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Build Docker images (Admin, ./src, true, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Build Docker images (Admin, ./src, true, true): src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Upload: src/Core/Utilities/CoreHelpers.cs#L345
The behavior of 'long.ToString(string)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.ReadableBytesSize(long)' with a call to 'long.ToString(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Upload: src/Core/Utilities/CoreHelpers.cs#L258
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.SecureRandomString(int, string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Upload: src/Core/Utilities/CoreHelpers.cs#L122
The behavior of 'string.ToUpper()' could vary based on the current user's locale settings. Replace this call in 'CoreHelpers.CleanCertificateThumbprint(string)' with a call to 'string.ToUpper(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Upload: src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Upload: src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Upload: src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Upload: src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Upload: src/Core/AdminConsole/Models/Mail/DeviceApprovalRequestedViewModel.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'DeviceApprovalRequestedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Upload: src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Upload: src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)

Artifacts

Produced during runtime
Name Size Digest
Admin.zip
48.2 MB
sha256:4f64abc57138b06c2c041fb07fbd6a5437906a6cd4da034aa079796cbe1e2952
Api.zip
45.3 MB
sha256:3638f952a61f0fd785ee425bb13008440d381838c032d72162460c0c352bb69c
Billing.zip
44.4 MB
sha256:5b8a49ee580142921a478164ed3d91a6babebfccdc2a0dc61ea4ac13611670f1
Events.zip
43.4 MB
sha256:deb29d7d5e8b414600f8d17373b298d934634f20ed5d974f9ef9ecab51be8b07
EventsProcessor.zip
43.4 MB
sha256:5b2bfb84230a403814ecfd1666e28eb44cd1effcbd9cb3fa84a08c3d97b76ec8
Icons.zip
43.8 MB
sha256:ec5b6700d8549216e0670820a2578a5bf1f6f41a0b93f7c5dd1c878cf2f3e1c1
Identity.zip
43.4 MB
sha256:7ebb9cb9b4516f88974f4336bd89a9edd3cbe254065d6ffbea3104864e24e3f0
MsSqlMigratorUtility-linux-x64
63.8 MB
sha256:06ad0d8bb392f91d860e5bb52ea557d34e6bd94f220a44bbd3d68c2c6b64e8e8
MsSqlMigratorUtility-osx-x64
64.6 MB
sha256:ccb8fe730d8484c4a5e32ea3ed924e8e4c4572ddd3ff50ca35bed66fa4493c03
MsSqlMigratorUtility-win-x64
64.4 MB
sha256:315610d36e24a63a770a832a993f8df0c21987fb380a262af0ebceb7bb816ec0
MsSqlMigratorUtility.zip
26.1 MB
sha256:387ea3037545732c98f45ff4b8a44771054b57a597a6f353a6b8bf704e593442
Notifications.zip
43.6 MB
sha256:65d65183e69f493876bd70cc2289eeee2c1f2b1fe0ab635c2ec5cc2e8a7fab17
Scim.zip
43.4 MB
sha256:d52561778aaec90da523da8ba69652093f857ba2a66c2e21a65bb2283e9ee397
SeederApi.zip
44.8 MB
sha256:38fc90bda89c70b36b36cee8c89cd361d0fb5544ec107716ed1aaa6e5349ecae
Setup.zip
25.9 MB
sha256:eb94b095bb54fd35003a5d2a9ce1bffa7b528faa8abaf61284b47eb5d77a1e20
Sso.zip
43.7 MB
sha256:c22d89d942494b9340f5292d68158cc4986c0ea1a751f23d5cb2ed961be3b961
bitwarden~server~2STUFM.dockerbuild
138 KB
sha256:57fe73a134e8fbe1a20ad2e6b897a19c69f1307d01319a0a42b67d27866d7753
bitwarden~server~5HJEHY.dockerbuild
141 KB
sha256:42b6bc62d3393dc02b397ab95bcf4fcd443550d373cbdb7c1557362b35d1f209
bitwarden~server~G1VH15.dockerbuild
123 KB
sha256:8d2f09a9a6b874d9e97b08a4b011e37b8a3664847d705d55f24c19bb06e79468
bitwarden~server~I5F7CM.dockerbuild
141 KB
sha256:eaa60d9d12142149d14aca1f7aef511169eab2e3e16101185fdcbf78e8c686ba
bitwarden~server~I7JSYQ.dockerbuild
86.3 KB
sha256:a181bc2070a246688d51600de3566b5e87a6af13ece16bae9569a9ac28d31b05
bitwarden~server~LMM9QV.dockerbuild
140 KB
sha256:2a599ff17283fc87a6f3ab8fc4c9aaa5f0a1b8fe2aaa25099dbe32582ff4f1dc
bitwarden~server~M4VW36.dockerbuild
128 KB
sha256:db897ee7d6060bb817cabcd3708996c0a3157d19e91ee285c44e4f3484987276
bitwarden~server~MLVWBD.dockerbuild
164 KB
sha256:18d94eeb4cdd6499a49ba12903efe8942197c92d5aec8d2e062bf7cda6ceb869
bitwarden~server~N33SAZ.dockerbuild
141 KB
sha256:6ef1c5a802321eeb8fa53b198f70bf15a3a30020667f59f5b595b5262cc90650
bitwarden~server~N3ZOPS.dockerbuild
13.8 KB
sha256:58f598aa150674f2026c0e64308c66f92d0c1d6ffff864bb53346fcc364a28e4
bitwarden~server~N6AXL9.dockerbuild
138 KB
sha256:b63ffe11bbedd686df4a4261d499079c4f12af0647d197d14b7431b5bce2b0bb
bitwarden~server~NRCPT7.dockerbuild
13.7 KB
sha256:6bab9f259a979e99580d14e2089f16e9afde827ceb502fb331be3ae51e06c893
bitwarden~server~NXL38P.dockerbuild
13.8 KB
sha256:d1c728766ce86a4d933986e664155215075135c6690cdaaf64f4aba3fdda7339
bitwarden~server~OVYQHS.dockerbuild
13.3 KB
sha256:7b285b85926260da105ab9cc8599e766e927d160f1f9309535d5ffc47b651909
bitwarden~server~R1NWHR.dockerbuild
138 KB
sha256:33c1f8d1697bd8d0e4b85e965032eb9df34aab670cdcabe3c11a06bcd8be44d5
bitwarden~server~R3L0XJ.dockerbuild
13.1 KB
sha256:d95d1b1b903e3f819a58121a4afaf93e8492fad9d4eac44d5cc85785fe1e134b
bitwarden~server~S0CCWO.dockerbuild
13 KB
sha256:4edc5ec2868d046978c6b4463d75a98d2b9c3099faebc6a11f4f1931010057ad
bitwarden~server~SGYJ8A.dockerbuild
136 KB
sha256:e6ffd19281221c9c6c51430e0ccf0259a9d79073faa0de87e6a54c5ee41eeefd
bitwarden~server~STAVC6.dockerbuild
12.8 KB
sha256:be15dcc655545272f95efdf58ac9e5f15cf58b96f39c971721cec8979c8e6d59
bitwarden~server~TNFBLR.dockerbuild
13.7 KB
sha256:3ee1cc51254fd246bf839711b5754544987d4dfc3965487e7b0c4f8946fff4e6
bitwarden~server~TW92NT.dockerbuild
137 KB
sha256:ebc169458f24fce158f3d579fb2295e1fba88017a2b18d16108dcd2f545a68eb
bitwarden~server~TYW92U.dockerbuild
81.3 KB
sha256:bc6b1e2dbac7419bea2b1a84695145587efa9b61f4dcf688cd70003557e47376
bitwarden~server~TYYFP5.dockerbuild
14.6 KB
sha256:e3f4a20dc070ab8d20c1a35ec85ba7b0e2055a43705c7de3ffc74a3ba4872ed1
bitwarden~server~VG082S.dockerbuild
13.7 KB
sha256:752ad7f2ded4d05ae3f2f9e656f0a971f65b9650de3f155a295c19a763e4325d
bitwarden~server~WRKHSB.dockerbuild
14.5 KB
sha256:8d7ff1aa7b6351b9d5b4e60a4dde042654f624d0d6ba0ab7e53ab2a58ca32126
bitwarden~server~XD5HMZ.dockerbuild
161 KB
sha256:c754a39449477576216296f90647060e9008e196106d0e5f86a35d5139b259bf
bitwarden~server~XNDM6X.dockerbuild
13.2 KB
sha256:0f9e3ccb234206372be3920036b8f749accdcc19d536e35f999526d840a7f2d8
bitwarden~server~ZZMUTB.dockerbuild
146 KB
sha256:5b1733e4034b9ba58f9343e0c783b81d25872e731c17cd7f89493be1f398c1e0
identity.json
2.94 KB
sha256:16fa941245f011f246942bb9bdeb1a6da65a638a81bcfa52c3d3bb725d85a708
internal.json
67.7 KB
sha256:a36f408bfd118075ad01795d4fd621487428aede11737643c7d237cef28c28a5
swagger.json
9.08 KB
sha256:565b8ce14c73abc36c286f354106009e07a07460ff5eb8a316ec9645fe3cbe80