Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #152

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 1, 2024

This PR contains the following updates:

Package Type Update Change
actions/upload-artifact action minor v4.3.4 -> v4.4.0
bufbuild/buf-setup-action action minor v1.34.0 -> v1.41.0
docker/login-action action digest 0d4c9c5 -> 9780b0c
docker/setup-buildx-action action digest 4fd8129 -> 988b5a0
docker/setup-qemu-action action digest 5927c83 -> 49b3bc8
github/codeql-action action minor v3.25.11 -> v3.26.6
miracum/.github action minor v1.11.2 -> v1.12.2
ossf/scorecard-action action minor v2.3.3 -> v2.4.0

Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.4.0

Compare Source

v4.3.6

Compare Source

v4.3.5

Compare Source

bufbuild/buf-setup-action (bufbuild/buf-setup-action)

v1.41.0

Compare Source

v1.40.1

Compare Source

Release v1.40.1

v1.40.0

Compare Source

Release v1.40.0

v1.39.0

Compare Source

Release v1.39.0

v1.38.0

Compare Source

Release v1.38.0

v1.37.0

Compare Source

Release v1.37.0

v1.36.0

Compare Source

Release v1.36.0

v1.35.1

Compare Source

Release v1.35.1

v1.35.0

Compare Source

Release v1.35.0

github/codeql-action (github/codeql-action)

v3.26.6

Compare Source

v3.26.5

Compare Source

v3.26.4

Compare Source

v3.26.3

Compare Source

v3.26.2

Compare Source

v3.26.1

Compare Source

v3.26.0

Compare Source

v3.25.15

Compare Source

v3.25.14

Compare Source

v3.25.13

Compare Source

v3.25.12

Compare Source

miracum/.github (miracum/.github)

v1.12.2

Compare Source

Miscellaneous Chores

v1.12.1

Compare Source

Miscellaneous Chores

v1.12.0

Compare Source

Features
Miscellaneous Chores
  • use best-practices preset (aca53b6)

v1.11.4

Compare Source

Miscellaneous Chores

v1.11.3

Compare Source

Miscellaneous Chores
ossf/scorecard-action (ossf/scorecard-action)

v2.4.0

Compare Source

What's Changed

This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.

Documentation

New Contributors

Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0


Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Aug 1, 2024

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 9 0 0.21s
⚠️ CSHARP csharpier 46 1 3.12s
⚠️ CSHARP dotnet-format yes 7 33.15s
⚠️ CSHARP roslynator 5 2 65.29s
✅ DOCKERFILE hadolint 1 0 0.13s
❌ EDITORCONFIG editorconfig-checker 105 1 0.33s
✅ JSON jsonlint 9 0 2.81s
✅ JSON prettier 9 0 2.89s
✅ MARKDOWN markdownlint 3 0 0.65s
⚠️ MARKDOWN markdown-table-formatter 3 1 0.38s
✅ PROTOBUF protolint 5 0 4.92s
✅ REPOSITORY checkov yes no 17.98s
✅ REPOSITORY dustilock yes no 0.07s
✅ REPOSITORY gitleaks yes no 0.32s
✅ REPOSITORY git_diff yes no 0.05s
✅ REPOSITORY grype yes no 18.0s
✅ REPOSITORY kics yes no 19.62s
✅ REPOSITORY secretlint yes no 0.71s
✅ REPOSITORY syft yes no 0.31s
✅ REPOSITORY trivy yes no 7.24s
✅ REPOSITORY trivy-sbom yes no 1.48s
✅ REPOSITORY trufflehog yes no 6.14s
✅ XML xmllint 1 0 0.01s
✅ YAML prettier 24 0 1.06s
✅ YAML yamllint 24 0 0.63s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/github-actions branch 7 times, most recently from 025e43a to f59a289 Compare August 6, 2024 23:26
@renovate renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from 7df9cfe to 0a6d98e Compare August 19, 2024 16:51
@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from 3c2a5ad to 09dd7ce Compare August 28, 2024 01:34
@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from cf9834c to 3ae6d89 Compare September 5, 2024 01:38
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from 7179c85 to 998abd5 Compare September 8, 2024 12:16
Copy link

github-actions bot commented Sep 8, 2024

Trivy image scan report

ghcr.io/miracum/vfps:pr-152 (ubuntu 24.04)

5 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 1 LOW: 4)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libssl3t64 CVE-2024-6119 MEDIUM 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.4
libssl3t64 CVE-2024-2511 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2
libssl3t64 CVE-2024-4603 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2
libssl3t64 CVE-2024-4741 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2
libssl3t64 CVE-2024-5535 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2

No Misconfigurations found

opt/vfps/Vfps.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/8.0.7/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.7/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

Copy link

github-actions bot commented Sep 8, 2024

Code Coverage

Package Line Rate Branch Rate Health
Vfps 94% 60%
Vfps.Tests 99% 100%
Summary 95% (442 / 463) 66% (33 / 50)

Minimum allowed line rate is 50%


ghz run statistics

Summary:
  Count:	5000
  Total:	8.95 s
  Slowest:	520.75 ms
  Fastest:	7.25 ms
  Average:	86.66 ms
  Requests/sec:	558.54

Response time histogram:
  7.253   [1]    |
  58.603  [316]  |∎∎∎
  109.952 [4063] |∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎
  161.301 [474]  |∎∎∎∎∎
  212.650 [96]   |∎
  264.000 [0]    |
  315.349 [0]    |
  366.698 [1]    |
  418.047 [0]    |
  469.397 [42]   |
  520.746 [7]    |

Latency distribution:
  10 % in 63.40 ms 
  25 % in 68.77 ms 
  50 % in 76.40 ms 
  75 % in 95.32 ms 
  90 % in 116.00 ms 
  95 % in 128.75 ms 
  99 % in 196.28 ms 

Status code distribution:
  [OK]   5000 responses   

iter8 report

Experiment summary:
*******************

  Experiment completed: true
  No task failures: true
  Total number of tasks: 6
  Number of completed tasks: 6
  Number of completed loops: 1

Whether or not service level objectives (SLOs) are satisfied:
*************************************************************

  SLO Conditions                  | Satisfied
  --------------                  | ---------
  grpc/error-rate <= 0            | true
  grpc/latency/mean (msec) <= 200 | true
  grpc/latency/p99 (msec) <= 400  | true
  

Latest observed values for metrics:
***********************************

  Metric                   | value
  -------                  | -----
  grpc/error-count         | 0.00
  grpc/error-rate          | 0.00
  grpc/latency/mean (msec) | 130.33
  grpc/latency/p99 (msec)  | 397.00
  grpc/request-count       | 50000.00
  

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants