chore(deps): update aquasecurity/trivy-action action to v0.28.0 #1695
Annotations
3 warnings and 2 notices
|
Run HadoLint:
tests/workflows/integration/test-upload-charm/test.Dockerfile#L4
Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag
|
|
Run HadoLint:
tests/workflows/integration/test-upload-charm/test.Dockerfile#L6
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Run HadoLint:
tests/workflows/integration/test-upload-charm/test.Dockerfile#L6
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
Run HadoLint:
tests/workflows/integration/test-upload-charm/test.Dockerfile#L6
Delete the apt-get lists after installing something
|
|
Run HadoLint:
tests/workflows/integration/test-upload-charm/test.Dockerfile#L6
Avoid additional packages by specifying `--no-install-recommends`
|
Loading