Run Image Scan for Amazon CloudWatch Observability Helm Chart #47
Annotations
2 errors, 12 warnings, and 10 notices
|
Scan for vulnerabilities
CVE-2024-34156 - HIGH severity - encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion vulnerability in stdlib
|
|
Scan for vulnerabilities
Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.
|
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Run echo '${{ fromJson(env.SCAN_RESULT) }}'
Encountered an error when evaluating display name ${{ format('echo ''{0}''
echo ''{1}''
', fromJson(env.SCAN_RESULT), env.SCAN_RESULT) }}. The template is not valid. .github/workflows/amazon-cloudwatch-observability-image-scan.yaml (Line: 93, Col: 14): Error reading JToken from JsonReader. Path '', line 0, position 0.
|
|
Scan for vulnerabilities
Dockerfile not provided. Skipping sarif scan result.
|
|
Scan for vulnerabilities
CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-12-base
|
|
Scan for vulnerabilities
CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in libgcc-s1
|
|
Scan for vulnerabilities
CVE-2024-26462 - MEDIUM severity - krb5: Memory leak at /krb5/src/kdc/ndr.c vulnerability in libgssapi-krb5-2
|
|
Scan for vulnerabilities
CVE-2024-37370 - MEDIUM severity - krb5: GSS message token handling vulnerability in libgssapi-krb5-2
|
|
Scan for vulnerabilities
CVE-2024-37371 - MEDIUM severity - krb5: GSS message token handling vulnerability in libgssapi-krb5-2
|
|
Scan for vulnerabilities
CVE-2024-26462 - MEDIUM severity - krb5: Memory leak at /krb5/src/kdc/ndr.c vulnerability in libk5crypto3
|
|
Scan for vulnerabilities
CVE-2024-37370 - MEDIUM severity - krb5: GSS message token handling vulnerability in libk5crypto3
|
|
Scan for vulnerabilities
CVE-2024-37371 - MEDIUM severity - krb5: GSS message token handling vulnerability in libk5crypto3
|
|
Scan for vulnerabilities
CVE-2024-26462 - MEDIUM severity - krb5: Memory leak at /krb5/src/kdc/ndr.c vulnerability in libkrb5-3
|
|
Scan for vulnerabilities
CVE-2016-2781 - LOW severity - coreutils: Non-privileged session can escape to the parent session in chroot vulnerability in coreutils
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in dirmngr
|
|
Scan for vulnerabilities
CVE-2022-27943 - LOW severity - binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const vulnerability in gcc-12-base
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg-l10n
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg-utils
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg2
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpg
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpg-agent
|
|
Scan for vulnerabilities
CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpg-wks-client
|
Loading