Skip to content

Bump github.com/nbd-wtf/go-nostr from 0.17.1-0.20230426111250-32ca737acf77 to 0.37.3 #966

Bump github.com/nbd-wtf/go-nostr from 0.17.1-0.20230426111250-32ca737acf77 to 0.37.3

Bump github.com/nbd-wtf/go-nostr from 0.17.1-0.20230426111250-32ca737acf77 to 0.37.3 #966

Triggered via pull request September 24, 2024 14:26
Status Failure
Total duration 8m 32s
Artifacts 1

analysis.yml

on: pull_request
Scorecards  /  Security Scorecards
30s
Scorecards / Security Scorecards
Sonatype Nancy  /  Sonatype Nancy
3m 10s
Sonatype Nancy / Sonatype Nancy
Dependency Review  /  Scan dependencies for license compliance
11s
Dependency Review / Scan dependencies for license compliance
Trivy  /  Filesystem
41s
Trivy / Filesystem
Trivy  /  Container
0s
Trivy / Container
FOSSA  /  Find license compliance and security issues
FOSSA / Find license compliance and security issues
Semgrep Scan  /  semgrep
Semgrep Scan / semgrep
Matrix: CodeQL
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 7 warnings
Sonatype Nancy / Sonatype Nancy
Command failed: go env GOPATH go: downloading go1.23.1 (linux/amd64) go: download go1.23.1: golang.org/[email protected]: Get "https://storage.googleapis.com/proxy-golang-org-prod/fbcea61ab6686895-golang.org:toolchain-v0.0.1-go1.23.1.linux-amd64.zip?Expires=1727266654&GoogleAccessId=gcs-urlsigner-prod%40golang-modproxy.iam.gserviceaccount.com&Signature=S7cY5lwQhXmnVDss7%2F8SI2W94sjggBRnUNyuyr3csSABzNA8uHj%2FQvc16dRamL5FV2PSuXdgzvafnhBES%2FgQ0MYE28X7R7tc71BWsw6D5r0Zj3bFx8akA4ohO8HxrgAThKzAVs%2FH3xxDzcSHZIf9MgMGDsCEFU8uCHgNpamPAj7YuSTQ6W5ZetjGd%2FiIlrAnihdRIB5%2BbDwJgzaOR%2FXnuBp0FYcjPeg5NCO%2BYd2xQKlFykNxS4Tq2LJoXHm19gfLweF8kc%2Fea3YSa5nDs02ZljyXBMDtqFlRf%2FvY86XInh6F2PhO%2BaF8xc8kiaZVuEXN29gev2xPGYufdrrBDiK8aQ%3D%3D": dial tcp 54.185.253.63:443: connect: connection refused
Dependency Review / Scan dependencies for license compliance
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Scorecards / Security Scorecards
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce, github/codeql-action/upload-sarif@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Trivy / Filesystem
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce, github/codeql-action/upload-sarif@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Sonatype Nancy / Sonatype Nancy
The following actions use a deprecated Node.js version and will be forced to run on node20: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
CodeQL (go) / CodeQL Analysis
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, github/codeql-action/init@f0a12816612c7306b485a22cb164feb43c6df818, github/codeql-action/autobuild@f0a12816612c7306b485a22cb164feb43c6df818, github/codeql-action/analyze@f0a12816612c7306b485a22cb164feb43c6df818. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
CodeQL (go) / CodeQL Analysis
The "paths"/"paths-ignore" fields of the config only have effect for JavaScript, Python, and Ruby
Deprecation notice: v1, v2, and v3 of the artifact actions
The following artifacts were uploaded using a version of actions/upload-artifact that is scheduled for deprecation: "SARIF file". Please update your workflow to use v4 of the artifact actions. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

Artifacts

Produced during runtime
Name Size
SARIF file Expired
38.9 KB