Skip to content
This repository was archived by the owner on Jul 30, 2026. It is now read-only.

Weekly security scan #46

Weekly security scan

Weekly security scan #46

Triggered via schedule July 20, 2026 10:14
Status Failure
Total duration 1m 1s
Artifacts

security-scan.yaml

on: schedule
Matrix: Trivy
Fit to window
Zoom out
Zoom in

Annotations

30 errors and 3 warnings
Trivy (release-0.11)
controllers.OpenStackServerReconciler.getOrCreateServer calls x509.HostnameError.Error
Trivy (release-0.11)
image.readerWithProgress.Read calls http.readWriteCloserBody.Read, which eventually calls x509.Certificate.VerifyHostname
Trivy (release-0.11)
image.readerWithProgress.Read calls http.readWriteCloserBody.Read, which eventually calls x509.Certificate.Verify
Trivy (release-0.11)
controllers.OpenStackFloatingIPPoolReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls mime.WordDecoder.DecodeHeader
Trivy (release-0.11)
image.readerWithProgress.Read calls http.body.Read, which eventually calls textproto.Reader.ReadMIMEHeader
Trivy (release-0.11)
image.orcImageReconciler.uploadImageContent calls http.Client.Do, which eventually calls tls.Dialer.DialContext
Trivy (release-0.11)
cluster.main calls http.ListenAndServe, which eventually calls tls.DialWithDialer
Trivy (release-0.11)
hash.DeepHashObject calls fmt.Fprintf, which calls tls.Conn.Write
Trivy (release-0.11)
image.readerWithProgress.Read calls http.readWriteCloserBody.Read, which calls tls.Conn.Read
Trivy (release-0.11)
cluster.main calls http.ListenAndServe, which eventually calls tls.Conn.HandshakeContext
Trivy (release-0.12)
controllers.OpenStackServerReconciler.getOrCreateServer calls x509.HostnameError.Error
Trivy (release-0.12)
models.main calls fmt.Fprintf, which eventually calls x509.Certificate.VerifyHostname
Trivy (release-0.12)
models.main calls fmt.Fprintf, which eventually calls x509.Certificate.Verify
Trivy (release-0.12)
controllers.OpenStackFloatingIPPoolReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls mime.WordDecoder.DecodeHeader
Trivy (release-0.12)
cluster.main calls http.ListenAndServe, which eventually calls textproto.Reader.ReadMIMEHeader
Trivy (release-0.12)
openstack.GetSupportedMicroversions calls gophercloud.ServiceClient.Request, which eventually calls tls.Dialer.DialContext
Trivy (release-0.12)
cluster.main calls http.ListenAndServe, which eventually calls tls.DialWithDialer
Trivy (release-0.12)
models.main calls fmt.Fprintf, which calls tls.Conn.Write
Trivy (release-0.12)
openstack.GetSupportedMicroversions calls gophercloud.ServiceClient.Request, which eventually calls tls.Conn.Read
Trivy (release-0.12)
cluster.main calls http.ListenAndServe, which eventually calls tls.Conn.HandshakeContext
Trivy (main)
controllers.OpenStackServerReconciler.getOrCreateServer calls x509.HostnameError.Error
Trivy (main)
models.main calls fmt.Fprintf, which eventually calls x509.Certificate.VerifyHostname
Trivy (main)
models.main calls fmt.Fprintf, which eventually calls x509.Certificate.Verify
Trivy (main)
controllers.OpenStackFloatingIPPoolReconciler.Reconcile calls client.client.List, which eventually calls mime.WordDecoder.DecodeHeader
Trivy (main)
cluster.main calls http.ListenAndServe, which eventually calls textproto.Reader.ReadMIMEHeader
Trivy (main)
openstack.GetSupportedMicroversions calls gophercloud.ServiceClient.Request, which eventually calls tls.Dialer.DialContext
Trivy (main)
cluster.main calls http.ListenAndServe, which eventually calls tls.DialWithDialer
Trivy (main)
models.main calls fmt.Fprintf, which calls tls.Conn.Write
Trivy (main)
openstack.GetSupportedMicroversions calls gophercloud.ServiceClient.Request, which eventually calls tls.Conn.Read
Trivy (main)
cluster.main calls http.ListenAndServe, which eventually calls tls.Conn.HandshakeContext
Trivy (release-0.11)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Trivy (release-0.12)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Trivy (main)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/