Skip to content

Improve challenge61 and heroku cds usage #232

Improve challenge61 and heroku cds usage

Improve challenge61 and heroku cds usage #232

Triggered via pull request March 7, 2026 04:51
Status Success
Total duration 10m 31s
Artifacts 3

pr-preview.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L18
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DOCKER_ENV_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Variables should be defined before their use: Dockerfile#L17
UndefinedVar: Usage of undefined variable '$argBasedVersion' More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L16
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "ARG_BASED_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals: Dockerfile#L74
JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L21
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "WRONGSECRETS_MCP_SECRET") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L19
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "AZURE_KEY_VAULT_ENABLED") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Artifacts

Produced during runtime
Name Size Digest
OWASP~wrongsecrets~NRNZSM.dockerbuild
168 KB
sha256:43822631522b1b050358dabf93cabdc081beded7ef7f584c148389a186edc373
visual-diff-pr-2438
1.72 MB
sha256:2a09b42fac98556eb7d5a9dae6dbefbbff1e5cb6e1abdecebfd3dec1c9de869c
wrongsecrets-preview-pr-2438
352 MB
sha256:7adc31370746e19d524f7c277353da15be8be87e9d78f41fb4a096ed615abf3e