build(deps): bump the all group across 1 directory with 8 updates #280
Triggered via pull request
September 29, 2025 09:05
dependabot[bot]
Status
Failure
Total duration
3m 15s
Artifacts
–
security.yml
on: pull_request
Perform SAST analysis (golangci-lint)
2m 56s
Perform SCA analysis (govulncheck)
3m 6s
Annotations
10 errors and 1 warning
|
Perform SCA analysis (govulncheck)
config.InitConfig calls viper.ReadInConfig, which eventually calls lzma.Reader2Config.Verify
|
|
Perform SCA analysis (govulncheck)
config.InitConfig calls viper.ReadInConfig, which eventually calls lzma.Reader2Config.NewReader2
|
|
Perform SCA analysis (govulncheck)
config.InitConfig calls viper.ReadInConfig, which eventually calls lzma.Reader2.Read
|
|
Perform SCA analysis (govulncheck)
config.Key.String calls cast.ToString, which eventually calls lzma.Properties.String
|
|
Perform SCA analysis (govulncheck)
docker.RunOnce calls multierr.multiError.Error, which eventually calls lzma.EncodeDictCap
|
|
Perform SCA analysis (govulncheck)
config.InitConfig calls viper.ReadInConfig, which eventually calls lzma.DecodeDictCap
|
|
Perform SCA analysis (govulncheck)
config.InitConfig calls viper.ReadInConfig, which eventually calls lzma.ByteReader
|
|
Perform SCA analysis (govulncheck)
sync.init calls copy.init, which eventually calls hash.init
|
|
Perform SCA analysis (govulncheck)
docker.RunOnce calls multierr.multiError.Error, which eventually calls hash.NewCyclicPoly
|
|
Perform SCA analysis (govulncheck)
docker.RunOnce calls multierr.multiError.Error, which eventually calls hash.CyclicPoly.RollByte
|
|
Perform SCA analysis (govulncheck)
Both go-version and go-version-file inputs are specified, only go-version will be used
|