Skip to content

security: fix CVE-2023-48795 #230

security: fix CVE-2023-48795

security: fix CVE-2023-48795 #230

Triggered via pull request February 5, 2024 22:25
Status Failure
Total duration 32s
Artifacts

codeql-analysis.yml

on: pull_request
Matrix: Analyze
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 2 warnings
Analyze (go)
This version of the CodeQL Action was deprecated on January 18th, 2023, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v2. For more information, see https://github.blog/changelog/2023-01-18-code-scanning-codeql-action-v1-is-now-deprecated/
Analyze (go)
This version of the CodeQL Action was deprecated on January 18th, 2023, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v2. For more information, see https://github.blog/changelog/2023-01-18-code-scanning-codeql-action-v1-is-now-deprecated/
Analyze (go)
We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Failure invoking /opt/hostedtoolcache/CodeQL/2.16.1/x64/codeql/go/tools/autobuild.sh with arguments . Exit code 1 and error was: 2024/02/05 22:26:13 Autobuilder was built with go1.21.6, environment has go1.20.13 2024/02/05 22:26:13 LGTM_SRC is /home/runner/work/docker_auth/docker_auth 2024/02/05 22:26:13 Found go.mod, enabling go modules 2024/02/05 22:26:13 The go.mod version is newer than the installed version of Go. Consider adding an actions/setup-go step to your workflow. go: errors parsing go.mod: /home/runner/work/docker_auth/docker_auth/auth_server/go.mod:5: unknown directive: toolchain 2024/02/05 22:26:13 Running /usr/bin/go failed, continuing anyway: exit status 1 2024/02/05 22:26:13 Failed to run `go mod tidy -e` 2024/02/05 22:26:13 Import path is 'github.com/cesanta/docker_auth' 2024/02/05 22:26:13 Build failed, continuing to install dependencies. 2024/02/05 22:26:13 Installing dependencies using `go get -v ./...` in `auth_server`. go: errors parsing go.mod: /home/runner/work/docker_auth/docker_auth/auth_server/go.mod:5: unknown directive: toolchain 2024/02/05 22:26:13 Running /usr/bin/go failed, continuing anyway: exit status 1 2024/02/05 22:26:13 Running extractor command '/opt/hostedtoolcache/CodeQL/2.16.1/x64/codeql/go/tools/linux64/go-extractor [./...]' from directory 'auth_server'. 2024/02/05 22:26:13 Build flags: ''; patterns: './...' 2024/02/05 22:26:13 Running packages.Load. 2024/02/05 22:26:13 Error running go tooling: err: exit status 1: stderr: go: errors parsing go.mod: /home/runner/work/docker_auth/docker_auth/auth_server/go.mod:5: unknown directive: toolchain 2024/02/05 22:26:13 Extraction failed: exit status 1
Analyze (go)
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v2, github/codeql-action/init@v1, github/codeql-action/autobuild@v1. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Analyze (go)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, github/codeql-action/init@v1, github/codeql-action/autobuild@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/