Trivy: security findings

[JiaulHC]

Security scan report

Repository: InfinitiBit/graphbit
Scope: main (default), develop
Scan date: 2026-09-07
Scanner: Trivy

This issue is updated on each scan. It is closed when all scanned branches are clean.

Summary

Category	Critical	High	Medium	Low	Open
Secrets	0	0	0	0	0
Vulnerabilities	0	5	2	3	10
Misconfigurations	0	2	0	1	3

License policy violations: 0

Vulnerabilities

Severity	Package	Installed	Fixed version	Vulnerability	Branches
High	aws-lc-sys	0.38.0	0.39.0	GHSA-394x-vwmw-crm3	main
High	pyo3	0.24.2	0.29.0	GHSA-36hh-v3qg-5jq4	main
High	quinn-proto	0.11.14	0.11.15	GHSA-4w2j-m93h-cj5j	main
High	rustls-webpki	0.103.9	0.103.13	GHSA-82j2-j2ch-gfr8	main
Medium	pyo3	0.24.2	0.29.0	GHSA-chgr-c6px-7xpp	main
Medium	rustls-webpki	0.103.9	0.103.10	GHSA-pwjx-qhcg-rvj4	main
Low	rand	0.9.2	0.9.3	GHSA-cq8v-f236-94qc	main
Low	rustls-webpki	0.103.9	0.103.12	GHSA-965h-392x-2mh5	main

Misconfigurations

Severity	ID	Issue	Location	Branch	Remediation
High	DS-0002	Image user should not be 'root'	benchmarks/Dockerfile	develop	Add 'USER ' line to the Dockerfile
High	DS-0029	'apt-get' missing '--no-install-recommends'	benchmarks/Dockerfile	develop	Add '--no-install-recommends' flag to 'apt-get'
High	DS-0002	Image user should not be 'root'	benchmarks/Dockerfile	main	Add 'USER ' line to the Dockerfile
High	DS-0029	'apt-get' missing '--no-install-recommends'	benchmarks/Dockerfile	main	Add '--no-install-recommends' flag to 'apt-get'
Low	DS-0026	No HEALTHCHECK defined	benchmarks/Dockerfile	develop	Add HEALTHCHECK instruction in Dockerfile
Low	DS-0026	No HEALTHCHECK defined	benchmarks/Dockerfile	main	Add HEALTHCHECK instruction in Dockerfile