ci: bump github/codeql-action from 4.35.1 to 4.35.2 #142
dependabot[bot]Annotations
1 warning and 10 notices
|
Pre-commit
Failed to save: Unable to reserve cache with key setup-uv-2-x86_64-unknown-linux-gnu-ubuntu-24.04-3.13.13-pruned-78b084720a27bac6accc900ce7b872557032cf52c19ed90275a92568ed936a0d, another job may be creating this cache.
|
|
Security audit:
src/python_security_auditing/runners.py#L86
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/runners.py#L79
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/runners.py#L71
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/runners.py#L53
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/runners.py#L7
[B404] Consider possible security implications associated with the subprocess module.
|
|
Security audit:
src/python_security_auditing/pr_comment.py#L101
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/pr_comment.py#L88
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/pr_comment.py#L76
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/pr_comment.py#L35
[B603] subprocess call - check for execution of untrusted input.
|
|
Security audit:
src/python_security_auditing/pr_comment.py#L7
[B404] Consider possible security implications associated with the subprocess module.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
security-audit-reports
Expired
|
2.95 KB |
sha256:8fd2e2343b8305ec9a3f927cfe058cb9792322f00d3c07188aa3828fbccec7e8
|
|