Skip to content

Test CI Improvements#110

Open
jkondrat wants to merge 1 commit into
mainfrom
feat/ci-improvements-test
Open

Test CI Improvements#110
jkondrat wants to merge 1 commit into
mainfrom
feat/ci-improvements-test

Conversation

@jkondrat

@jkondrat jkondrat commented Jul 16, 2026

Copy link
Copy Markdown
Collaborator

DO NOT MERGE: testing the CI output/PR comments functionality

@github-actions

github-actions Bot commented Jul 16, 2026

Copy link
Copy Markdown

🔍 InfraScan: C (71.1%)

Category Grade Findings
Overall C (71.1%) 🔴 11 critical, 88 high, 179 medium
Security D (58.3%) 92 medium
Cost C (70.2%) 6 high, 16 medium
Containers C (84.9%) 🔴 11 critical, 82 high, 71 medium
Baseline This PR Delta
Infra cost $4,625/mo $5,623/mo +$998/mo ⚠️

🔴 New CRITICAL findings (11)

Rule File Description
CVE-2020-15999 docker-compose.yml Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.1
CVE-2018-1000517 docker-compose.yml BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c
CVE-2022-37434 docker-compose.yml zlib through 1.2.12 has a heap-based buffer over-read or buffer overfl
CVE-2019-12900 docker-compose.yml No description available
CVE-2024-5535 docker-compose.yml Issue summary: Calling the OpenSSL API function SSL_select_next_proto
CVE-2019-11068 docker-compose.yml No description available
CVE-2019-6978 docker-compose.yml No description available
CVE-2022-48174 docker-compose.yml There is a stack overflow vulnerability in ash.c:6030 in busybox befor
CVE-2019-14697 docker-compose.yml No description available
CVE-2022-27404 docker-compose.yml FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovere
… and 1 more

Full report in Actions summary (HTML artifact also attached)

@jkondrat
jkondrat force-pushed the feat/ci-improvements-test branch from 5d72d79 to e9ca7f0 Compare July 16, 2026 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant