Skip to content
Analysis

Bump golang.org/x/sync from 0.1.0 to 0.6.0 #658

Sign in to view logs

Bump golang.org/x/sync from 0.1.0 to 0.6.0

Bump golang.org/x/sync from 0.1.0 to 0.6.0 #658

Triggered via pull request January 5, 2024 14:05
@dependabotdependabot[bot]
opened #458
dependabot/go_modules/golang.org/x/sync-0.6.0
Status Failure
Total duration 54m 2s
Artifacts 1

analysis.yml

on: pull_request
Scorecards  /  Security Scorecards
49s
Scorecards / Security Scorecards
Sonatype Nancy  /  Sonatype Nancy
46s
Sonatype Nancy / Sonatype Nancy
Dependency Review  /  Scan dependencies for license compliance
19s
Dependency Review / Scan dependencies for license compliance
Trivy  /  Filesystem
45m 59s
Trivy / Filesystem
Trivy  /  Container
0s
Trivy / Container
FOSSA  /  Find license compliance and security issues
FOSSA / Find license compliance and security issues
Semgrep Scan  /  semgrep
Semgrep Scan / semgrep
Matrix: CodeQL
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 3 warnings
Dependency Review / Scan dependencies for license compliance
StepSecurity Harden Runner: DNS resolution for domain pipelinesghubeus2.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
Dependency Review / Scan dependencies for license compliance
StepSecurity Harden Runner: DNS resolution for domain results-receiver.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
Scorecards / Security Scorecards
StepSecurity Harden Runner: Reverting agent since allowed endpoint *.blob.core.windows.net could not be resolved
CodeQL (go) / CodeQL Analysis
StepSecurity Harden Runner: DNS resolution for domain results-receiver.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
CodeQL (go) / CodeQL Analysis
StepSecurity Harden Runner: DNS resolution for domain pipelinesghubeus2.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
Trivy / Filesystem
The hosted runner: GitHub Actions 6 lost communication with the server. Anything in your workflow that terminates the runner process, starves it for CPU/Memory, or blocks its network access can cause this error.
Dependency Review / Scan dependencies for license compliance
Failed to save: reserveCache failed: connect ECONNREFUSED 54.185.253.63:443
CodeQL (go) / CodeQL Analysis
Failed to save: reserveCache failed: connect ECONNREFUSED 54.185.253.63:443
CodeQL (go) / CodeQL Analysis
The "paths"/"paths-ignore" fields of the config only have effect for JavaScript, Python, and Ruby

Artifacts

Produced during runtime
Name Size
SARIF file Expired
46.6 KB