Skip to content

build: add vulnerability scan to PR build #713

build: add vulnerability scan to PR build

build: add vulnerability scan to PR build #713

Triggered via pull request June 11, 2024 18:47
Status Startup failure
Total duration
Artifacts

pr.yml

on: pull_request
Build and Test Java
Build and Test Java
scan  /  sbom
scan / sbom
Check editorconfig
Check editorconfig
Dry-run release
Dry-run release
Lint commits for semantic-release
Lint commits for semantic-release
Security validation
Security validation
Matrix: Build Isthmus Native Image
Waiting for pending jobs
Matrix: scan / scan
Waiting for pending jobs
Fit to window
Zoom out
Zoom in

Annotations

1 error
Invalid workflow file: .github/workflows/pr.yml#L27
The workflow is not valid. substrait-io/substrait-java/.github/workflows/vulnerability-scan.yml@e9efd90b024e5d6e389d727bfd18296fa6438aac (Line: 27, Col: 3): Error calling workflow 'google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.7.4'. The workflow is requesting 'actions: read, contents: read', but is only allowed 'actions: none, contents: none'.