Skip to content
Build and push docker image to registry

(FIX): CI Security Fix - branchname injection #166

Sign in to view logs

(FIX): CI Security Fix - branchname injection

(FIX): CI Security Fix - branchname injection #166

Re-run triggered January 29, 2025 13:23
@glegendre01glegendre01
#479
ci-security-fix
Status Success
Total duration 10m 20s
Artifacts –

build.yaml

on: pull_request
matrix
2s
matrix
Matrix: build-and-push-image
Fit to window
Zoom out
Zoom in

Annotations

14 warnings
matrix
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda-all#L40
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile-cuda#L45
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L28
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L28
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "ACTIONS_RUNTIME_TOKEN") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/