Merge pull request #1 from Edunova8/Mobb-fix-01fae #1
Edunova8Annotations
12 warnings
|
kics-action
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/upload-artifact@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
[HIGH] Missing User Instruction:
Dockerfile#L1
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
Dockerfile#L5
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
Dockerfile#L6
When installing a package, its pin version should be defined
|
|
[MEDIUM] Update Instruction Alone:
Dockerfile#L5
Instruction 'RUN <package-manager> update' should always be followed by '<package-manager> install' in the same RUN statement
|
|
[MEDIUM] Update Instruction Alone:
Dockerfile#L6
Instruction 'RUN <package-manager> update' should always be followed by '<package-manager> install' in the same RUN statement
|
|
[LOW] Healthcheck Instruction Missing:
Dockerfile#L1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
|
|
[LOW] MAINTAINER Instruction Being Used:
Dockerfile#L2
The MAINTAINER instruction sets the Author field of the generated images. The LABEL instruction is a much more flexible version of this and you should use it instead, as it enables setting any metadata you require, and can be viewed easily
|
|
[LOW] Multiple RUN, ADD, COPY, Instructions Listed:
Dockerfile#L4
Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.
|
|
[INFO] APT-GET Not Avoiding Additional Packages:
Dockerfile#L5
Check if any apt-get installs don't use '--no-install-recommends' flag to avoid installing additional packages.
|
|
[INFO] APT-GET Not Avoiding Additional Packages:
Dockerfile#L6
Check if any apt-get installs don't use '--no-install-recommends' flag to avoid installing additional packages.
|
|
Deprecation notice: v1, v2, and v3 of the artifact actions
The following artifacts were uploaded using a version of actions/upload-artifact that is scheduled for deprecation: "results".
Please update your workflow to use v4 of the artifact actions.
Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
results
Expired
|
69.4 KB |
|