Skip to content

fix: Fix security vulnerabilities and update dependencies #2629

fix: Fix security vulnerabilities and update dependencies

fix: Fix security vulnerabilities and update dependencies #2629

Triggered via pull request January 7, 2025 09:18
Status Failure
Total duration 13m 48s
Artifacts 2

ci.yaml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

21 errors and 8 warnings
Unit test: pkg/utils/git/remote.go#L8
missing go.sum entry for module providing package github.com/go-git/go-git/v5 (imported by github.com/pluralsh/plural-cli/pkg/utils/git); to add:
Unit test: pkg/utils/git/auth.go#L7
missing go.sum entry for module providing package github.com/go-git/go-git/v5/plumbing/transport (imported by github.com/pluralsh/plural-cli/pkg/utils/git); to add:
Unit test: pkg/utils/git/auth.go#L8
missing go.sum entry for module providing package github.com/go-git/go-git/v5/plumbing/transport/http (imported by github.com/pluralsh/plural-cli/pkg/utils/git); to add:
Unit test: pkg/utils/git/auth.go#L9
missing go.sum entry for module providing package github.com/go-git/go-git/v5/plumbing/transport/ssh (imported by github.com/pluralsh/plural-cli/pkg/utils/git); to add:
Unit test
missing go.sum entry for module providing package google.golang.org/protobuf/reflect/protoreflect (imported by cloud.google.com/go/compute/apiv1/computepb); to add:
Unit test
missing go.sum entry for module providing package google.golang.org/protobuf/runtime/protoimpl (imported by cloud.google.com/go/compute/apiv1/computepb); to add:
Unit test
missing go.sum entry for module providing package google.golang.org/protobuf/types/descriptorpb (imported by google.golang.org/genproto/googleapis/api/annotations); to add:
Unit test
missing go.sum entry for module providing package google.golang.org/protobuf/types/known/durationpb (imported by cloud.google.com/go/storage); to add:
Unit test
missing go.sum entry for module providing package google.golang.org/protobuf/encoding/prototext (imported by github.com/golang/protobuf/proto); to add:
Unit test
missing go.sum entry for module providing package google.golang.org/protobuf/encoding/protowire (imported by github.com/golang/protobuf/proto); to add:
Build image
buildx failed with: ERROR: failed to solve: process "/bin/sh -c go mod download" did not complete successfully: exit code: 1
Lint: pkg/provider/gcp.go#L24
`v1` redeclared in this block (typecheck)
Lint: pkg/provider/gcp.go#L20
other declaration of v1 (typecheck)
Lint: pkg/provider/gcp.go#L123
undefined: cloudresourcemanager (typecheck)
Lint: pkg/provider/gcp.go#L132
undefined: cloudresourcemanager (typecheck)
Lint: pkg/scm/gitlab.go#L16
undefined: gitlab (typecheck)
Lint: pkg/scm/gitlab.go#L41
undefined: gitlab (typecheck)
Lint: pkg/scm/gitlab.go#L61
undefined: gitlab (typecheck)
Lint: pkg/client/plural.go#L88
p.GrabAccessToken undefined (type *Plural has no field or method GrabAccessToken) (typecheck)
Lint: pkg/client/plural.go#L140
p.Me undefined (type *Plural has no field or method Me) (typecheck)
Lint: cmd/command/ai/ai.go#L35
p.InitPluralClient undefined (type *Plural has no field or method InitPluralClient) (typecheck)
Unit test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Trivy fs scan
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Trivy fs scan
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
Build image
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Lint
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Build dind image
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
Build dind image
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
GoReleaser build
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

Artifacts

Produced during runtime
Name Size
pluralsh~plural-cli~ANZ6DR.dockerbuild
86.1 KB
pluralsh~plural-cli~QR8IKG.dockerbuild
40.4 KB