chore(deps): Bump the minor-and-patch group across 1 directory with 4 updates #964
dependabot[bot]security-scans.yaml
on: pull_request
dependency-review
6s
trivy-scan
27s
codeql
55s
hadolint
16s
Annotations
11 warnings
|
hadolint:
mcp/shopping_tool/Dockerfile#L6
Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
hadolint:
mcp/exgentic_benchmarks/Dockerfile#L15
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L28
Use WORKDIR to switch to a directory
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L28
Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L28
Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L17
Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`
|
|
hadolint:
mcp/appworld_apis/Dockerfile#L17
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
hadolint:
a2a/weather_service/Dockerfile#L5
Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
hadolint:
a2a/exgentic_agent/Dockerfile#L15
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
hadolint:
a2a/claude_agent/Dockerfile#L7
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
codeql
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|