Bump docker/login-action from 4.2.0 to 4.6.0 - #1346
Quality Gate failed
Failed conditions
See analysis details on SonarQube Cloud
Annotations
Check warning on line 28 in .github/workflows/update-docker-image.yml
sonarqubecloud / SonarCloud Code Analysis
"npx" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-8ikvFqFO0EDsIf7Ly&open=AZ-8ikvFqFO0EDsIf7Ly&pullRequest=1346
Check warning on line 32 in .github/workflows/update-docker-image.yml
sonarqubecloud / SonarCloud Code Analysis
Not disabling redirects might allow for redirections to insecure websites. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-8ikvFqFO0EDsIf7Lz&open=AZ-8ikvFqFO0EDsIf7Lz&pullRequest=1346
Check warning on line 37 in .github/workflows/release.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-8ikt5qFO0EDsIf7Lw&open=AZ-8ikt5qFO0EDsIf7Lw&pullRequest=1346
Check warning on line 45 in .github/workflows/release.yml
sonarqubecloud / SonarCloud Code Analysis
Not disabling redirects might allow for redirections to insecure websites. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=eclipse-pass_pass-ui&issues=AZ-8ikt5qFO0EDsIf7Lx&open=AZ-8ikt5qFO0EDsIf7Lx&pullRequest=1346