Run Image Scan for Amazon CloudWatch Observability Helm Chart #54
Annotations
6 errors and 11 warnings
|
Run echo "SCAN_RESULT=$(jq -s . /tmp/container-scan-KqftGK/result.json)" >> $GITHUB_ENV
Unable to process file command 'env' successfully.
|
|
|
|
Scan for vulnerabilities
CVE-2024-24790 - CRITICAL severity - golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2023-45288 - HIGH severity - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-34156 - HIGH severity - encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion vulnerability in stdlib
|
|
Scan for vulnerabilities
Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.
|
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Scan for vulnerabilities
Dockerfile not provided. Skipping sarif scan result.
|
|
Scan for vulnerabilities
CVE-2023-45289 - MEDIUM severity - golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2023-45290 - MEDIUM severity - golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-24783 - MEDIUM severity - golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-24784 - MEDIUM severity - golang: net/mail: comments in display names are incorrectly handled vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-24785 - MEDIUM severity - golang: html/template: errors returned from MarshalJSON methods may break template escaping vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-24789 - MEDIUM severity - golang: archive/zip: Incorrect handling of certain ZIP files vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-24791 - MEDIUM severity - net/http: Denial of service due to improper 100-continue handling in net/http vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-34155 - MEDIUM severity - go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion vulnerability in stdlib
|
|
Scan for vulnerabilities
CVE-2024-34158 - MEDIUM severity - go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion vulnerability in stdlib
|
Loading