Bump docker/login-action from 4.2.0 to 4.5.1 - #1345
Quality Gate failed
Failed conditions
See analysis details on SonarQube Cloud
Annotations
Check warning on line 37 in .github/workflows/release.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-YelVQ_mlnSya70Nrx&open=AZ-YelVQ_mlnSya70Nrx&pullRequest=1345
Check warning on line 32 in .github/workflows/update-docker-image.yml
sonarqubecloud / SonarCloud Code Analysis
Not disabling redirects might allow for redirections to insecure websites. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-YelWG_mlnSya70Nr0&open=AZ-YelWG_mlnSya70Nr0&pullRequest=1345
Check warning on line 45 in .github/workflows/release.yml
sonarqubecloud / SonarCloud Code Analysis
Not disabling redirects might allow for redirections to insecure websites. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-YelVQ_mlnSya70Nry&open=AZ-YelVQ_mlnSya70Nry&pullRequest=1345
Check warning on line 28 in .github/workflows/update-docker-image.yml
sonarqubecloud / SonarCloud Code Analysis
"npx" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-YelWG_mlnSya70Nrz&open=AZ-YelWG_mlnSya70Nrz&pullRequest=1345