chore(deps): update super-linter/super-linter action to v8.7.0 by renovate[bot] · Pull Request #22 · infinite-automations/workflows

renovate · 2026-07-26T03:11:32Z

This PR contains the following updates:

Package	Type	Update	Change
super-linter/super-linter	action	minor	`v8.6.0` → `v8.7.0`

Release Notes

super-linter/super-linter (super-linter/super-linter)

`v8.7.0`

Compare Source

🚀 Features

powershell ansi output and dynamic sizing (#7793) (b573256), closes #7445
update existing pr summary comment (#7848) (85afaee)

🐛 Bugfixes

docs: don't mention extension in bash-exec (#7708) (56c7c3c)
enable_github_actions_step_summary ref in debug log (#7853) (8c38f8f)
ktlint installation (#7883) (6ab7200)
output: pass comment payload via stdin to jq and curl (#7928) (4dd300c)
remove debug statement when calling gh api (#7889) (30ed3d5)
terragrunt version lookup (#7918) (a2eaeb1)

⬆️ Dependency updates

bundler: bump rubocop (#7923) (0738987)
bundler: bump rubocop in /dependencies in the rubocop group (#7731) (bf2414c)
bundler: bump rubocop-capybara (#7781) (35ef3f6)
bundler: bump the rubocop group across 1 directory with 2 updates (#7816) (5a6de32)
bundler: bump the rubocop group across 1 directory with 3 updates (#7875) (4d01de2)
bundler: bump the rubocop group in /dependencies with 2 updates (#7890) (cd79eea)
docker: bump dart in the docker group (#7755) (86c9c54)
docker: bump goreleaser/goreleaser in the docker group (#7705) (487d0d8)
docker: bump mvdan/shfmt in the docker group (#7718) (a1fc30a)
docker: bump python (#7730) (c5fb918)
docker: bump the docker group across 1 directory with 10 updates (#7817) (5e3985b)
docker: bump the docker group across 1 directory with 11 updates (#7876) (9bc8ec9)
docker: bump the docker group across 1 directory with 3 updates (#7765) (d9f1398)
docker: bump the docker group across 1 directory with 5 updates (#7786) (b7ba6a5)
docker: bump the docker group across 1 directory with 6 updates (#7912) (7b70a50)
docker: bump the docker group across 1 directory with 8 updates (#7753) (3fec5a3)
java: bump com.puppycrawl.tools:checkstyle (#7788) (4a69c1a)
java: bump com.puppycrawl.tools:checkstyle (#7914) (65ad252)
npm: bump @hono/node-server in /dependencies (#7720) (a8c6363)
npm: bump @protobufjs/utf8 from 1.1.0 to 1.1.1 in /dependencies (#7812) (0651d17)
npm: bump @stoplight/spectral-cli in /dependencies (#7743) (fd0d01c)
npm: bump @stoplight/spectral-cli in /dependencies (#7814) (813e4fb)
npm: bump brace-expansion (#7840) (f6e64b5)
npm: bump fast-uri from 3.0.6 to 3.1.2 in /dependencies (#7803) (9253b88)
npm: bump fast-xml-builder from 1.1.4 to 1.2.0 in /dependencies (#7802) (5b044ae)
npm: bump hono from 4.12.14 to 4.12.18 in /dependencies (#7801) (b39c4bb)
npm: bump hono from 4.12.7 to 4.12.12 in /dependencies (#7721) (ab671c2)
npm: bump next from 16.2.2 to 16.2.3 in /dependencies (#7739) (223d8b2)
npm: bump next from 16.2.4 to 16.2.6 in /dependencies (#7811) (308a04b)
npm: bump protobufjs (#7917) (3833d50)
npm: bump protobufjs from 7.5.4 to 7.5.5 in /dependencies (#7757) (7c9fb62)
npm: bump qs (#7851) (6006811)
npm: bump renovate (#7719) (c2f30f5)
npm: bump the npm group across 1 directory with 12 updates (#7783) (ab373d4)
npm: bump the npm group across 1 directory with 14 updates (#7749) (2c4a86b)
npm: bump the npm group across 1 directory with 16 updates (#7820) (193731b)
npm: bump the npm group across 1 directory with 2 updates (#7723) (dcf8e43)
npm: bump the npm group across 1 directory with 2 updates (#7754) (3f6dee8)
npm: bump the npm group across 1 directory with 2 updates (#7756) (13e0463)
npm: bump the npm group across 1 directory with 3 updates (#7712) (4b9bbc3)
npm: bump the npm group across 1 directory with 9 updates (#7939) (b2baf83)
npm: bump the npm-security-updates group across 1 directory with 3 updates (#7881) (6c432fd)
python: bump checkov (#7717) (b7acd07)
python: bump the pip group across 1 directory with 10 updates (#7833) (20e6299)
python: bump the pip group across 1 directory with 4 updates (#7711) (42b2592)
python: bump the pip group across 1 directory with 4 updates (#7744) (84ef12c)
python: bump the pip group across 1 directory with 6 updates (#7877) (1019b6b)
python: bump the pip group across 1 directory with 6 updates (#7932) (27acb3c)

🧰 Maintenance

add format targets (#7829) (52f9368)
audit workflow, format shell scripts (#7922) (4d1317a)
dev-docker: bump node (#7846) (8d41efe)
dev-docker: bump node from 26.1.0-bookworm to 26.1.0-trixie (#7866) (b38bf70)
dev-docker: bump node in /dev-dependencies (#7709) (6c807f7)
dev-docker: bump node in /dev-dependencies (#7799) (95cfd43)
dev-npm: bump @xmldom/xmldom (#7701) (06b4165)
dev-npm: bump @xmldom/xmldom (#7770) (8042100)
dev-npm: bump js-yaml (#7929) (84be0a4)
dev-npm: bump release-please (#7856) (7ed3770)
dev-npm: bump release-please (#7892) (ef436c3)
dev-npm: bump release-please in /dev-dependencies (#7716) (654b1be)
dev-npm: bump release-please in /dev-dependencies (#7747) (57fd1af)
document slim image build (#7752) (5810599)
exempt release prs from stale check (#7934) (3e6cd30)
fix versions script (#7830) (19a4b8c)
github-actions: bump docker/login-action in the dev-ci-tools group (#7710) (b8dec80)
github-actions: bump the dev-ci-tools group across 1 directory with 2 updates (#7772) (8461fa7)
github-actions: bump the dev-ci-tools group across 1 directory with 2 updates (#7909) (f692a3d)
github-actions: bump the dev-ci-tools group across 1 directory with 3 updates (#7740) (2aea9c2)
group dependabot actions updates (#7758) (8b87839)
group security updates (#7823) (5a8e5ca)
linter version format test (#7926) (a160da2)
npm: update overrides (#7903) (5e08e31)
trivy: move audit to dedicated workflow (#7933) (613bdfb)
update deps (#7713) (31ee13d)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

semrel-infinite-automations · 2026-07-26T03:14:10Z

Super-linter summary

Language	Validation result
BASH	Pass ✅
BASH_EXEC	Pass ✅
CHECKOV	Fail ❌
CSHARP	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
DOTNET_SLN_FORMAT_ANALYZERS	Pass ✅
DOTNET_SLN_FORMAT_STYLE	Pass ✅
DOTNET_SLN_FORMAT_WHITESPACE	Pass ✅
ENV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Fail ❌
GITLEAKS	Pass ✅
GIT_COMMITLINT	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JAVASCRIPT_ES	Pass ✅
JAVASCRIPT_PRETTIER	Pass ✅
JSON	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
PRE_COMMIT	Pass ✅
RENOVATE	Pass ✅
SHELL_SHFMT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

CHECKOV



       _               _
   ___| |__   ___  ___| | _______   __
  / __| '_ \ / _ \/ __| |/ / _ \ \ / /
 | (__| | | |  __/ (__|   < (_) \ V /
  \___|_| |_|\___|\___|_|\_\___/ \_/

By Prisma Cloud | version: 3.3.1
Update available 3.3.1 -> 3.3.8
Run pip3 install -U checkov to update


helm scan results:

Passed checks: 0, Failed checks: 1, Skipped checks: 0

Check: CKV_K8S_21: "The default namespace should not be used"
	FAILED for resource: ConfigMap.default.release-name-config
	File: /test/helm/test-chart/templates/configmap.yaml:3-13
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20

		3  | apiVersion: v1
		4  | kind: ConfigMap
		5  | metadata:
		6  |   name: release-name-config
		7  |   labels:
		8  |     app.kubernetes.io/name: test-chart
		9  |     app.kubernetes.io/version: "1.0.0"
		10 |     app.kubernetes.io/managed-by: Helm
		11 | data:
		12 |   app-name: test-chart
		13 |   app-version: "1.0.0"

dockerfile scan results:

Passed checks: 4, Failed checks: 0, Skipped checks: 1

Check: CKV_DOCKER_11: "Ensure From Alias are unique for multistage builds."
	PASSED for resource: /test/docker/Dockerfile.
	File: /test/docker/Dockerfile:1-6
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-docker-from-alias-is-unique-for-multistage-builds
Check: CKV_DOCKER_8: "Ensure the last USER is not root"
	PASSED for resource: /test/docker/Dockerfile.USER
	File: /test/docker/Dockerfile:6-6
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-the-last-user-is-not-root
Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
	PASSED for resource: /test/docker/Dockerfile.USER
	File: /test/docker/Dockerfile:6-6
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
	PASSED for resource: /test/docker/Dockerfile.HEALTHCHECK
	File: /test/docker/Dockerfile:5-5
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
Check: CKV_DOCKER_7: "Ensure the base image uses a non latest version tag"
	SKIPPED for resource: /test/docker/Dockerfile.
	Suppress comment: Test image, pinning not needed
	File: /test/docker/Dockerfile:1-6
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-the-base-image-uses-a-non-latest-version-tag
github_actions scan results:

Passed checks: 622, Failed checks: 0, Skipped checks: 0

Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/lint.yml:38-94
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/lint.yml:39-94
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/lint.yml:39-94
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/lint.yml:39-94
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/lint.yml:38-94
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/lint.yml:39-94
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Lint)
	File: /.github/workflows/lint.yml:9-38
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint).steps[1](Checkout)
	File: /.github/workflows/lint.yml:44-52
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint).steps[2](Load Linter Configuration)
	File: /.github/workflows/lint.yml:51-80
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint).steps[3](Get GitHub App Token)
	File: /.github/workflows/lint.yml:79-88
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint).steps[4](Super-Linter)
	File: /.github/workflows/lint.yml:87-94
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint).steps[1](Checkout)
	File: /.github/workflows/lint.yml:44-52
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint).steps[2](Load Linter Configuration)
	File: /.github/workflows/lint.yml:51-80
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint).steps[3](Get GitHub App Token)
	File: /.github/workflows/lint.yml:79-88
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint).steps[4](Super-Linter)
	File: /.github/workflows/lint.yml:87-94
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint).steps[1](Checkout)
	File: /.github/workflows/lint.yml:44-52
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint).steps[2](Load Linter Configuration)
	File: /.github/workflows/lint.yml:51-80
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint).steps[3](Get GitHub App Token)
	File: /.github/workflows/lint.yml:79-88
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint).steps[4](Super-Linter)
	File: /.github/workflows/lint.yml:87-94
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint).steps[1](Checkout)
	File: /.github/workflows/lint.yml:44-52
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint).steps[2](Load Linter Configuration)
	File: /.github/workflows/lint.yml:51-80
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint).steps[3](Get GitHub App Token)
	File: /.github/workflows/lint.yml:79-88
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint).steps[4](Super-Linter)
	File: /.github/workflows/lint.yml:87-94
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/cd-docker-helm.yml:131-177
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/cd-docker-helm.yml:132-151
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/cd-docker-helm.yml:151-177
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/cd-docker-helm.yml:132-151
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/cd-docker-helm.yml:151-177
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/cd-docker-helm.yml:132-151
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/cd-docker-helm.yml:151-177
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/cd-docker-helm.yml:131-177
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/cd-docker-helm.yml:132-151
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/cd-docker-helm.yml:151-177
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(CD (Docker + Helm))
	File: /.github/workflows/cd-docker-helm.yml:7-129
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docs-terraform.yml:51-104
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-terraform.yml:52-104
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-terraform.yml:52-104
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-terraform.yml:52-104
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docs-terraform.yml:51-104
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-terraform.yml:52-104
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Documentation (Terraform))
	File: /.github/workflows/docs-terraform.yml:9-51
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-terraform.yml:57-64
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[2](Render Terraform Docs)
	File: /.github/workflows/docs-terraform.yml:63-74
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[3](Upload Docs Artifact)
	File: /.github/workflows/docs-terraform.yml:73-83
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[4](Summary)
	File: /.github/workflows/docs-terraform.yml:82-104
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-terraform.yml:57-64
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[2](Render Terraform Docs)
	File: /.github/workflows/docs-terraform.yml:63-74
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[3](Upload Docs Artifact)
	File: /.github/workflows/docs-terraform.yml:73-83
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[4](Summary)
	File: /.github/workflows/docs-terraform.yml:82-104
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-terraform.yml:57-64
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[2](Render Terraform Docs)
	File: /.github/workflows/docs-terraform.yml:63-74
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[3](Upload Docs Artifact)
	File: /.github/workflows/docs-terraform.yml:73-83
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[4](Summary)
	File: /.github/workflows/docs-terraform.yml:82-104
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-terraform.yml:57-64
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[2](Render Terraform Docs)
	File: /.github/workflows/docs-terraform.yml:63-74
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[3](Upload Docs Artifact)
	File: /.github/workflows/docs-terraform.yml:73-83
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[4](Summary)
	File: /.github/workflows/docs-terraform.yml:82-104
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/_docs-preview-cleanup.yml:11-38
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(cleanup)
	File: /.github/workflows/_docs-preview-cleanup.yml:12-38
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(cleanup)
	File: /.github/workflows/_docs-preview-cleanup.yml:12-38
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(cleanup)
	File: /.github/workflows/_docs-preview-cleanup.yml:12-38
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/_docs-preview-cleanup.yml:11-38
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(cleanup)
	File: /.github/workflows/_docs-preview-cleanup.yml:12-38
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Docs Preview Cleanup)
	File: /.github/workflows/_docs-preview-cleanup.yml:5-9
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(cleanup).steps[1](Checkout)
	File: /.github/workflows/_docs-preview-cleanup.yml:17-24
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(cleanup).steps[2](Remove Preview)
	File: /.github/workflows/_docs-preview-cleanup.yml:23-38
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(cleanup).steps[1](Checkout)
	File: /.github/workflows/_docs-preview-cleanup.yml:17-24
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(cleanup).steps[2](Remove Preview)
	File: /.github/workflows/_docs-preview-cleanup.yml:23-38
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(cleanup).steps[1](Checkout)
	File: /.github/workflows/_docs-preview-cleanup.yml:17-24
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(cleanup).steps[2](Remove Preview)
	File: /.github/workflows/_docs-preview-cleanup.yml:23-38
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(cleanup).steps[1](Checkout)
	File: /.github/workflows/_docs-preview-cleanup.yml:17-24
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(cleanup).steps[2](Remove Preview)
	File: /.github/workflows/_docs-preview-cleanup.yml:23-38
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/ci-dotnet.yml:152-226
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-dotnet.yml:153-164
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build)
	File: /.github/workflows/ci-dotnet.yml:164-182
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/ci-dotnet.yml:182-209
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-dotnet.yml:209-226
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-dotnet.yml:153-164
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build)
	File: /.github/workflows/ci-dotnet.yml:164-182
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/ci-dotnet.yml:182-209
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-dotnet.yml:209-226
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-dotnet.yml:153-164
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build)
	File: /.github/workflows/ci-dotnet.yml:164-182
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/ci-dotnet.yml:182-209
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-dotnet.yml:209-226
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/ci-dotnet.yml:152-226
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-dotnet.yml:153-164
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build)
	File: /.github/workflows/ci-dotnet.yml:164-182
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/ci-dotnet.yml:182-209
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-dotnet.yml:209-226
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(CI (.NET))
	File: /.github/workflows/ci-dotnet.yml:7-150
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/ci-action.yml:95-146
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-action.yml:96-107
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-action.yml:107-127
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-action.yml:127-146
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-action.yml:96-107
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-action.yml:107-127
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-action.yml:127-146
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-action.yml:96-107
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-action.yml:107-127
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-action.yml:127-146
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/ci-action.yml:95-146
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-action.yml:96-107
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-action.yml:107-127
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-action.yml:127-146
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(CI (Action))
	File: /.github/workflows/ci-action.yml:7-93
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docs-mkdocs.yml:106-292
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-mkdocs.yml:107-292
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-mkdocs.yml:107-292
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-mkdocs.yml:107-292
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docs-mkdocs.yml:106-292
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-mkdocs.yml:107-292
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Documentation (MkDocs))
	File: /.github/workflows/docs-mkdocs.yml:9-106
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-mkdocs.yml:112-120
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[2](Download Artifact)
	File: /.github/workflows/docs-mkdocs.yml:119-129
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[3](Setup Python)
	File: /.github/workflows/docs-mkdocs.yml:128-134
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[4](Install MkDocs)
	File: /.github/workflows/docs-mkdocs.yml:133-152
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[5](Build Site)
	File: /.github/workflows/docs-mkdocs.yml:151-159
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[6](Upload Site Artifact)
	File: /.github/workflows/docs-mkdocs.yml:158-166
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[7](Deploy Versioned Docs with mike)
	File: /.github/workflows/docs-mkdocs.yml:165-191
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[8](Deploy Preview to GitHub Pages)
	File: /.github/workflows/docs-mkdocs.yml:190-222
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[9](Compute Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:221-235
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[10](Comment Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:234-255
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[11](Summary)
	File: /.github/workflows/docs-mkdocs.yml:254-292
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-mkdocs.yml:112-120
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[2](Download Artifact)
	File: /.github/workflows/docs-mkdocs.yml:119-129
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[3](Setup Python)
	File: /.github/workflows/docs-mkdocs.yml:128-134
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[4](Install MkDocs)
	File: /.github/workflows/docs-mkdocs.yml:133-152
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[5](Build Site)
	File: /.github/workflows/docs-mkdocs.yml:151-159
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[6](Upload Site Artifact)
	File: /.github/workflows/docs-mkdocs.yml:158-166
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[7](Deploy Versioned Docs with mike)
	File: /.github/workflows/docs-mkdocs.yml:165-191
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[8](Deploy Preview to GitHub Pages)
	File: /.github/workflows/docs-mkdocs.yml:190-222
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[9](Compute Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:221-235
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[10](Comment Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:234-255
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[11](Summary)
	File: /.github/workflows/docs-mkdocs.yml:254-292
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-mkdocs.yml:112-120
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[2](Download Artifact)
	File: /.github/workflows/docs-mkdocs.yml:119-129
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[3](Setup Python)
	File: /.github/workflows/docs-mkdocs.yml:128-134
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[4](Install MkDocs)
	File: /.github/workflows/docs-mkdocs.yml:133-152
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[5](Build Site)
	File: /.github/workflows/docs-mkdocs.yml:151-159
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[6](Upload Site Artifact)
	File: /.github/workflows/docs-mkdocs.yml:158-166
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[7](Deploy Versioned Docs with mike)
	File: /.github/workflows/docs-mkdocs.yml:165-191
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[8](Deploy Preview to GitHub Pages)
	File: /.github/workflows/docs-mkdocs.yml:190-222
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[9](Compute Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:221-235
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[10](Comment Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:234-255
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[11](Summary)
	File: /.github/workflows/docs-mkdocs.yml:254-292
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-mkdocs.yml:112-120
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[2](Download Artifact)
	File: /.github/workflows/docs-mkdocs.yml:119-129
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[3](Setup Python)
	File: /.github/workflows/docs-mkdocs.yml:128-134
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[4](Install MkDocs)
	File: /.github/workflows/docs-mkdocs.yml:133-152
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[5](Build Site)
	File: /.github/workflows/docs-mkdocs.yml:151-159
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[6](Upload Site Artifact)
	File: /.github/workflows/docs-mkdocs.yml:158-166
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[7](Deploy Versioned Docs with mike)
	File: /.github/workflows/docs-mkdocs.yml:165-191
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[8](Deploy Preview to GitHub Pages)
	File: /.github/workflows/docs-mkdocs.yml:190-222
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[9](Compute Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:221-235
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[10](Comment Preview URL)
	File: /.github/workflows/docs-mkdocs.yml:234-255
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[11](Summary)
	File: /.github/workflows/docs-mkdocs.yml:254-292
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/deploy-helm.yml:88-251
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/deploy-helm.yml:89-251
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/deploy-helm.yml:89-251
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/deploy-helm.yml:89-251
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/deploy-helm.yml:88-251
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy)
	File: /.github/workflows/deploy-helm.yml:89-251
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Deploy (Helm))
	File: /.github/workflows/deploy-helm.yml:9-88
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[1](Checkout)
	File: /.github/workflows/deploy-helm.yml:98-105
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[2](Setup Helm)
	File: /.github/workflows/deploy-helm.yml:104-110
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[3](Configure Kubeconfig)
	File: /.github/workflows/deploy-helm.yml:109-120
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[4](Helm Registry Login)
	File: /.github/workflows/deploy-helm.yml:119-132
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[5](Add Helm Repos)
	File: /.github/workflows/deploy-helm.yml:131-149
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[6](Build Helm Arguments)
	File: /.github/workflows/deploy-helm.yml:148-175
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[7](Deploy with Helm)
	File: /.github/workflows/deploy-helm.yml:174-195
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[8](Dry Run (Template))
	File: /.github/workflows/deploy-helm.yml:194-215
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[9](Set Result)
	File: /.github/workflows/deploy-helm.yml:214-228
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(deploy).steps[10](Summary)
	File: /.github/workflows/deploy-helm.yml:227-251
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[1](Checkout)
	File: /.github/workflows/deploy-helm.yml:98-105
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[2](Setup Helm)
	File: /.github/workflows/deploy-helm.yml:104-110
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[3](Configure Kubeconfig)
	File: /.github/workflows/deploy-helm.yml:109-120
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[4](Helm Registry Login)
	File: /.github/workflows/deploy-helm.yml:119-132
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[5](Add Helm Repos)
	File: /.github/workflows/deploy-helm.yml:131-149
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[6](Build Helm Arguments)
	File: /.github/workflows/deploy-helm.yml:148-175
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[7](Deploy with Helm)
	File: /.github/workflows/deploy-helm.yml:174-195
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[8](Dry Run (Template))
	File: /.github/workflows/deploy-helm.yml:194-215
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[9](Set Result)
	File: /.github/workflows/deploy-helm.yml:214-228
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(deploy).steps[10](Summary)
	File: /.github/workflows/deploy-helm.yml:227-251
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[1](Checkout)
	File: /.github/workflows/deploy-helm.yml:98-105
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[2](Setup Helm)
	File: /.github/workflows/deploy-helm.yml:104-110
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[3](Configure Kubeconfig)
	File: /.github/workflows/deploy-helm.yml:109-120
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[4](Helm Registry Login)
	File: /.github/workflows/deploy-helm.yml:119-132
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[5](Add Helm Repos)
	File: /.github/workflows/deploy-helm.yml:131-149
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[6](Build Helm Arguments)
	File: /.github/workflows/deploy-helm.yml:148-175
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[7](Deploy with Helm)
	File: /.github/workflows/deploy-helm.yml:174-195
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[8](Dry Run (Template))
	File: /.github/workflows/deploy-helm.yml:194-215
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[9](Set Result)
	File: /.github/workflows/deploy-helm.yml:214-228
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(deploy).steps[10](Summary)
	File: /.github/workflows/deploy-helm.yml:227-251
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[1](Checkout)
	File: /.github/workflows/deploy-helm.yml:98-105
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[2](Setup Helm)
	File: /.github/workflows/deploy-helm.yml:104-110
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[3](Configure Kubeconfig)
	File: /.github/workflows/deploy-helm.yml:109-120
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[4](Helm Registry Login)
	File: /.github/workflows/deploy-helm.yml:119-132
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[5](Add Helm Repos)
	File: /.github/workflows/deploy-helm.yml:131-149
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[6](Build Helm Arguments)
	File: /.github/workflows/deploy-helm.yml:148-175
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[7](Deploy with Helm)
	File: /.github/workflows/deploy-helm.yml:174-195
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[8](Dry Run (Template))
	File: /.github/workflows/deploy-helm.yml:194-215
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[9](Set Result)
	File: /.github/workflows/deploy-helm.yml:214-228
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(deploy).steps[10](Summary)
	File: /.github/workflows/deploy-helm.yml:227-251
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/release.yml:115-208
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release)
	File: /.github/workflows/release.yml:116-208
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release)
	File: /.github/workflows/release.yml:116-208
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release)
	File: /.github/workflows/release.yml:116-208
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/release.yml:115-208
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release)
	File: /.github/workflows/release.yml:116-208
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Release)
	File: /.github/workflows/release.yml:9-115
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[1](Checkout)
	File: /.github/workflows/release.yml:127-135
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[2](Download Artifact)
	File: /.github/workflows/release.yml:134-144
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[3](Get GitHub App Token)
	File: /.github/workflows/release.yml:143-152
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[4](Configure Git Authentication)
	File: /.github/workflows/release.yml:151-160
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[5](Setup Node.js)
	File: /.github/workflows/release.yml:159-165
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[6](Semantic Release)
	File: /.github/workflows/release.yml:164-183
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release).steps[7](Summary)
	File: /.github/workflows/release.yml:182-208
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[1](Checkout)
	File: /.github/workflows/release.yml:127-135
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[2](Download Artifact)
	File: /.github/workflows/release.yml:134-144
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[3](Get GitHub App Token)
	File: /.github/workflows/release.yml:143-152
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[4](Configure Git Authentication)
	File: /.github/workflows/release.yml:151-160
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[5](Setup Node.js)
	File: /.github/workflows/release.yml:159-165
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[6](Semantic Release)
	File: /.github/workflows/release.yml:164-183
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release).steps[7](Summary)
	File: /.github/workflows/release.yml:182-208
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[1](Checkout)
	File: /.github/workflows/release.yml:127-135
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[2](Download Artifact)
	File: /.github/workflows/release.yml:134-144
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[3](Get GitHub App Token)
	File: /.github/workflows/release.yml:143-152
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[4](Configure Git Authentication)
	File: /.github/workflows/release.yml:151-160
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[5](Setup Node.js)
	File: /.github/workflows/release.yml:159-165
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[6](Semantic Release)
	File: /.github/workflows/release.yml:164-183
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release).steps[7](Summary)
	File: /.github/workflows/release.yml:182-208
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[1](Checkout)
	File: /.github/workflows/release.yml:127-135
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[2](Download Artifact)
	File: /.github/workflows/release.yml:134-144
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[3](Get GitHub App Token)
	File: /.github/workflows/release.yml:143-152
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[4](Configure Git Authentication)
	File: /.github/workflows/release.yml:151-160
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[5](Setup Node.js)
	File: /.github/workflows/release.yml:159-165
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[6](Semantic Release)
	File: /.github/workflows/release.yml:164-183
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release).steps[7](Summary)
	File: /.github/workflows/release.yml:182-208
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/helm-push.yml:85-184
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push)
	File: /.github/workflows/helm-push.yml:86-184
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push)
	File: /.github/workflows/helm-push.yml:86-184
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push)
	File: /.github/workflows/helm-push.yml:86-184
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/helm-push.yml:85-184
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push)
	File: /.github/workflows/helm-push.yml:86-184
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Helm Push)
	File: /.github/workflows/helm-push.yml:9-85
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/helm-push.yml:92-99
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/helm-push.yml:98-108
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[3](Setup Helm)
	File: /.github/workflows/helm-push.yml:107-113
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[4](Helm Registry Login)
	File: /.github/workflows/helm-push.yml:112-124
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[5](Package Chart)
	File: /.github/workflows/helm-push.yml:123-140
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[6](Push Chart)
	File: /.github/workflows/helm-push.yml:139-151
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[7](Dry Run)
	File: /.github/workflows/helm-push.yml:150-161
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[8](Summary)
	File: /.github/workflows/helm-push.yml:160-184
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/helm-push.yml:92-99
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/helm-push.yml:98-108
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[3](Setup Helm)
	File: /.github/workflows/helm-push.yml:107-113
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[4](Helm Registry Login)
	File: /.github/workflows/helm-push.yml:112-124
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[5](Package Chart)
	File: /.github/workflows/helm-push.yml:123-140
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[6](Push Chart)
	File: /.github/workflows/helm-push.yml:139-151
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[7](Dry Run)
	File: /.github/workflows/helm-push.yml:150-161
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[8](Summary)
	File: /.github/workflows/helm-push.yml:160-184
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/helm-push.yml:92-99
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/helm-push.yml:98-108
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[3](Setup Helm)
	File: /.github/workflows/helm-push.yml:107-113
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[4](Helm Registry Login)
	File: /.github/workflows/helm-push.yml:112-124
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[5](Package Chart)
	File: /.github/workflows/helm-push.yml:123-140
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[6](Push Chart)
	File: /.github/workflows/helm-push.yml:139-151
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[7](Dry Run)
	File: /.github/workflows/helm-push.yml:150-161
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[8](Summary)
	File: /.github/workflows/helm-push.yml:160-184
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/helm-push.yml:92-99
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/helm-push.yml:98-108
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[3](Setup Helm)
	File: /.github/workflows/helm-push.yml:107-113
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[4](Helm Registry Login)
	File: /.github/workflows/helm-push.yml:112-124
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[5](Package Chart)
	File: /.github/workflows/helm-push.yml:123-140
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[6](Push Chart)
	File: /.github/workflows/helm-push.yml:139-151
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[7](Dry Run)
	File: /.github/workflows/helm-push.yml:150-161
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[8](Summary)
	File: /.github/workflows/helm-push.yml:160-184
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docs-action.yml:69-210
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-action.yml:70-210
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-action.yml:70-210
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-action.yml:70-210
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docs-action.yml:69-210
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/docs-action.yml:70-210
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Documentation (Action/Workflow))
	File: /.github/workflows/docs-action.yml:9-69
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-action.yml:75-82
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[2](Setup Node.js)
	File: /.github/workflows/docs-action.yml:81-87
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[3](Install action-docs)
	File: /.github/workflows/docs-action.yml:86-94
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[4](Generate Documentation (Single File))
	File: /.github/workflows/docs-action.yml:93-106
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[5](Generate Documentation (Directory))
	File: /.github/workflows/docs-action.yml:105-133
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[6](Fix References in Generated Docs)
	File: /.github/workflows/docs-action.yml:132-162
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[7](Check For Changes)
	File: /.github/workflows/docs-action.yml:161-176
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[8](Upload Docs Artifact)
	File: /.github/workflows/docs-action.yml:175-184
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs).steps[9](Summary)
	File: /.github/workflows/docs-action.yml:183-210
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-action.yml:75-82
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[2](Setup Node.js)
	File: /.github/workflows/docs-action.yml:81-87
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[3](Install action-docs)
	File: /.github/workflows/docs-action.yml:86-94
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[4](Generate Documentation (Single File))
	File: /.github/workflows/docs-action.yml:93-106
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[5](Generate Documentation (Directory))
	File: /.github/workflows/docs-action.yml:105-133
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[6](Fix References in Generated Docs)
	File: /.github/workflows/docs-action.yml:132-162
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[7](Check For Changes)
	File: /.github/workflows/docs-action.yml:161-176
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[8](Upload Docs Artifact)
	File: /.github/workflows/docs-action.yml:175-184
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs).steps[9](Summary)
	File: /.github/workflows/docs-action.yml:183-210
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-action.yml:75-82
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[2](Setup Node.js)
	File: /.github/workflows/docs-action.yml:81-87
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[3](Install action-docs)
	File: /.github/workflows/docs-action.yml:86-94
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[4](Generate Documentation (Single File))
	File: /.github/workflows/docs-action.yml:93-106
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[5](Generate Documentation (Directory))
	File: /.github/workflows/docs-action.yml:105-133
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[6](Fix References in Generated Docs)
	File: /.github/workflows/docs-action.yml:132-162
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[7](Check For Changes)
	File: /.github/workflows/docs-action.yml:161-176
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[8](Upload Docs Artifact)
	File: /.github/workflows/docs-action.yml:175-184
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs).steps[9](Summary)
	File: /.github/workflows/docs-action.yml:183-210
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[1](Checkout)
	File: /.github/workflows/docs-action.yml:75-82
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[2](Setup Node.js)
	File: /.github/workflows/docs-action.yml:81-87
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[3](Install action-docs)
	File: /.github/workflows/docs-action.yml:86-94
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[4](Generate Documentation (Single File))
	File: /.github/workflows/docs-action.yml:93-106
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[5](Generate Documentation (Directory))
	File: /.github/workflows/docs-action.yml:105-133
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[6](Fix References in Generated Docs)
	File: /.github/workflows/docs-action.yml:132-162
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[7](Check For Changes)
	File: /.github/workflows/docs-action.yml:161-176
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[8](Upload Docs Artifact)
	File: /.github/workflows/docs-action.yml:175-184
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs).steps[9](Summary)
	File: /.github/workflows/docs-action.yml:183-210
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/_test.yml:15-288
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-docs-mkdocs)
	File: /.github/workflows/_test.yml:16-25
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-docs-action)
	File: /.github/workflows/_test.yml:25-33
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-release)
	File: /.github/workflows/_test.yml:33-47
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-release-working-directory)
	File: /.github/workflows/_test.yml:47-63
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-ci-terraform-module)
	File: /.github/workflows/_test.yml:63-81
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-ci-action)
	File: /.github/workflows/_test.yml:81-99
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-docs-terraform)
	File: /.github/workflows/_test.yml:99-108
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-build-dotnet)
	File: /.github/workflows/_test.yml:108-119
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-docker)
	File: /.github/workflows/_test.yml:119-129
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-deploy-helm)
	File: /.github/workflows/_test.yml:129-145
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-ci-dotnet)
	File: /.github/workflows/_test.yml:145-168
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-cd-docker-helm)
	File: /.github/workflows/_test.yml:168-188
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oras-tag)
	File: /.github/workflows/_test.yml:188-200
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oci-push)
	File: /.github/workflows/_test.yml:200-215
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oci-push-verify)
	File: /.github/workflows/_test.yml:215-250
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-helm-push)
	File: /.github/workflows/_test.yml:250-262
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-helm-push-verify)
	File: /.github/workflows/_test.yml:262-288
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-docs-mkdocs)
	File: /.github/workflows/_test.yml:16-25
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-docs-action)
	File: /.github/workflows/_test.yml:25-33
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-release)
	File: /.github/workflows/_test.yml:33-47
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-release-working-directory)
	File: /.github/workflows/_test.yml:47-63
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-ci-terraform-module)
	File: /.github/workflows/_test.yml:63-81
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-ci-action)
	File: /.github/workflows/_test.yml:81-99
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-docs-terraform)
	File: /.github/workflows/_test.yml:99-108
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-build-dotnet)
	File: /.github/workflows/_test.yml:108-119
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-docker)
	File: /.github/workflows/_test.yml:119-129
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-deploy-helm)
	File: /.github/workflows/_test.yml:129-145
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-ci-dotnet)
	File: /.github/workflows/_test.yml:145-168
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-cd-docker-helm)
	File: /.github/workflows/_test.yml:168-188
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oras-tag)
	File: /.github/workflows/_test.yml:188-200
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oci-push)
	File: /.github/workflows/_test.yml:200-215
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oci-push-verify)
	File: /.github/workflows/_test.yml:215-250
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-helm-push)
	File: /.github/workflows/_test.yml:250-262
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-helm-push-verify)
	File: /.github/workflows/_test.yml:262-288
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-docs-mkdocs)
	File: /.github/workflows/_test.yml:16-25
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-docs-action)
	File: /.github/workflows/_test.yml:25-33
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-release)
	File: /.github/workflows/_test.yml:33-47
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-release-working-directory)
	File: /.github/workflows/_test.yml:47-63
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-ci-terraform-module)
	File: /.github/workflows/_test.yml:63-81
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-ci-action)
	File: /.github/workflows/_test.yml:81-99
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-docs-terraform)
	File: /.github/workflows/_test.yml:99-108
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-build-dotnet)
	File: /.github/workflows/_test.yml:108-119
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-docker)
	File: /.github/workflows/_test.yml:119-129
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-deploy-helm)
	File: /.github/workflows/_test.yml:129-145
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-ci-dotnet)
	File: /.github/workflows/_test.yml:145-168
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-cd-docker-helm)
	File: /.github/workflows/_test.yml:168-188
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oras-tag)
	File: /.github/workflows/_test.yml:188-200
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oci-push)
	File: /.github/workflows/_test.yml:200-215
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oci-push-verify)
	File: /.github/workflows/_test.yml:215-250
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-helm-push)
	File: /.github/workflows/_test.yml:250-262
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-helm-push-verify)
	File: /.github/workflows/_test.yml:262-288
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/_test.yml:15-288
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-docs-mkdocs)
	File: /.github/workflows/_test.yml:16-25
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-docs-action)
	File: /.github/workflows/_test.yml:25-33
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-release)
	File: /.github/workflows/_test.yml:33-47
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-release-working-directory)
	File: /.github/workflows/_test.yml:47-63
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-ci-terraform-module)
	File: /.github/workflows/_test.yml:63-81
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-ci-action)
	File: /.github/workflows/_test.yml:81-99
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-docs-terraform)
	File: /.github/workflows/_test.yml:99-108
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-build-dotnet)
	File: /.github/workflows/_test.yml:108-119
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-docker)
	File: /.github/workflows/_test.yml:119-129
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-deploy-helm)
	File: /.github/workflows/_test.yml:129-145
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-ci-dotnet)
	File: /.github/workflows/_test.yml:145-168
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-cd-docker-helm)
	File: /.github/workflows/_test.yml:168-188
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oras-tag)
	File: /.github/workflows/_test.yml:188-200
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oci-push)
	File: /.github/workflows/_test.yml:200-215
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oci-push-verify)
	File: /.github/workflows/_test.yml:215-250
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-helm-push)
	File: /.github/workflows/_test.yml:250-262
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-helm-push-verify)
	File: /.github/workflows/_test.yml:262-288
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Test)
	File: /.github/workflows/_test.yml:6-15
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oci-push-verify).steps[1](Install ORAS)
	File: /.github/workflows/_test.yml:222-229
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oci-push-verify).steps[2](Login to GHCR)
	File: /.github/workflows/_test.yml:228-238
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oci-push-verify).steps[3](Pull artifact from OCI registry)
	File: /.github/workflows/_test.yml:237-243
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-oci-push-verify).steps[4](Verify pulled artifact)
	File: /.github/workflows/_test.yml:242-250
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-helm-push-verify).steps[1](Setup Helm)
	File: /.github/workflows/_test.yml:269-275
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-helm-push-verify).steps[2](Login to GHCR with Helm)
	File: /.github/workflows/_test.yml:274-284
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test-helm-push-verify).steps[3](Pull chart from OCI registry)
	File: /.github/workflows/_test.yml:283-288
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oci-push-verify).steps[1](Install ORAS)
	File: /.github/workflows/_test.yml:222-229
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oci-push-verify).steps[2](Login to GHCR)
	File: /.github/workflows/_test.yml:228-238
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oci-push-verify).steps[3](Pull artifact from OCI registry)
	File: /.github/workflows/_test.yml:237-243
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-oci-push-verify).steps[4](Verify pulled artifact)
	File: /.github/workflows/_test.yml:242-250
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-helm-push-verify).steps[1](Setup Helm)
	File: /.github/workflows/_test.yml:269-275
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-helm-push-verify).steps[2](Login to GHCR with Helm)
	File: /.github/workflows/_test.yml:274-284
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test-helm-push-verify).steps[3](Pull chart from OCI registry)
	File: /.github/workflows/_test.yml:283-288
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oci-push-verify).steps[1](Install ORAS)
	File: /.github/workflows/_test.yml:222-229
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oci-push-verify).steps[2](Login to GHCR)
	File: /.github/workflows/_test.yml:228-238
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oci-push-verify).steps[3](Pull artifact from OCI registry)
	File: /.github/workflows/_test.yml:237-243
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-oci-push-verify).steps[4](Verify pulled artifact)
	File: /.github/workflows/_test.yml:242-250
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-helm-push-verify).steps[1](Setup Helm)
	File: /.github/workflows/_test.yml:269-275
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-helm-push-verify).steps[2](Login to GHCR with Helm)
	File: /.github/workflows/_test.yml:274-284
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test-helm-push-verify).steps[3](Pull chart from OCI registry)
	File: /.github/workflows/_test.yml:283-288
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oci-push-verify).steps[1](Install ORAS)
	File: /.github/workflows/_test.yml:222-229
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oci-push-verify).steps[2](Login to GHCR)
	File: /.github/workflows/_test.yml:228-238
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oci-push-verify).steps[3](Pull artifact from OCI registry)
	File: /.github/workflows/_test.yml:237-243
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-oci-push-verify).steps[4](Verify pulled artifact)
	File: /.github/workflows/_test.yml:242-250
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-helm-push-verify).steps[1](Setup Helm)
	File: /.github/workflows/_test.yml:269-275
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-helm-push-verify).steps[2](Login to GHCR with Helm)
	File: /.github/workflows/_test.yml:274-284
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test-helm-push-verify).steps[3](Pull chart from OCI registry)
	File: /.github/workflows/_test.yml:283-288
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/oras-tag.yml:58-180
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/oras-tag.yml:59-180
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/oras-tag.yml:59-180
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/oras-tag.yml:59-180
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/oras-tag.yml:58-180
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag)
	File: /.github/workflows/oras-tag.yml:59-180
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(OCI Retag)
	File: /.github/workflows/oras-tag.yml:9-58
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[1](Install ORAS)
	File: /.github/workflows/oras-tag.yml:64-70
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[2](Docker meta (source tags))
	File: /.github/workflows/oras-tag.yml:69-82
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[3](Determine Source Reference)
	File: /.github/workflows/oras-tag.yml:81-102
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[4](Login to Registry)
	File: /.github/workflows/oras-tag.yml:101-113
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[5](Resolve Digest)
	File: /.github/workflows/oras-tag.yml:112-124
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[6](Retag Image)
	File: /.github/workflows/oras-tag.yml:123-156
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(retag).steps[7](Summary)
	File: /.github/workflows/oras-tag.yml:155-180
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[1](Install ORAS)
	File: /.github/workflows/oras-tag.yml:64-70
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[2](Docker meta (source tags))
	File: /.github/workflows/oras-tag.yml:69-82
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[3](Determine Source Reference)
	File: /.github/workflows/oras-tag.yml:81-102
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[4](Login to Registry)
	File: /.github/workflows/oras-tag.yml:101-113
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[5](Resolve Digest)
	File: /.github/workflows/oras-tag.yml:112-124
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[6](Retag Image)
	File: /.github/workflows/oras-tag.yml:123-156
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(retag).steps[7](Summary)
	File: /.github/workflows/oras-tag.yml:155-180
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[1](Install ORAS)
	File: /.github/workflows/oras-tag.yml:64-70
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[2](Docker meta (source tags))
	File: /.github/workflows/oras-tag.yml:69-82
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[3](Determine Source Reference)
	File: /.github/workflows/oras-tag.yml:81-102
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[4](Login to Registry)
	File: /.github/workflows/oras-tag.yml:101-113
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[5](Resolve Digest)
	File: /.github/workflows/oras-tag.yml:112-124
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[6](Retag Image)
	File: /.github/workflows/oras-tag.yml:123-156
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(retag).steps[7](Summary)
	File: /.github/workflows/oras-tag.yml:155-180
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[1](Install ORAS)
	File: /.github/workflows/oras-tag.yml:64-70
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[2](Docker meta (source tags))
	File: /.github/workflows/oras-tag.yml:69-82
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[3](Determine Source Reference)
	File: /.github/workflows/oras-tag.yml:81-102
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[4](Login to Registry)
	File: /.github/workflows/oras-tag.yml:101-113
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[5](Resolve Digest)
	File: /.github/workflows/oras-tag.yml:112-124
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[6](Retag Image)
	File: /.github/workflows/oras-tag.yml:123-156
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(retag).steps[7](Summary)
	File: /.github/workflows/oras-tag.yml:155-180
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/build-dotnet.yml:53-158
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build)
	File: /.github/workflows/build-dotnet.yml:54-158
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build)
	File: /.github/workflows/build-dotnet.yml:54-158
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build)
	File: /.github/workflows/build-dotnet.yml:54-158
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/build-dotnet.yml:53-158
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build)
	File: /.github/workflows/build-dotnet.yml:54-158
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Build (.NET))
	File: /.github/workflows/build-dotnet.yml:9-53
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[1](Checkout)
	File: /.github/workflows/build-dotnet.yml:60-67
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[2](Setup .NET)
	File: /.github/workflows/build-dotnet.yml:66-72
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[3](Restore)
	File: /.github/workflows/build-dotnet.yml:71-77
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[4](Build)
	File: /.github/workflows/build-dotnet.yml:76-85
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[5](Test)
	File: /.github/workflows/build-dotnet.yml:84-93
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[6](Test Report)
	File: /.github/workflows/build-dotnet.yml:92-101
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[7](Publish)
	File: /.github/workflows/build-dotnet.yml:100-114
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[8](Upload Artifact)
	File: /.github/workflows/build-dotnet.yml:113-121
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[9](Set Result)
	File: /.github/workflows/build-dotnet.yml:120-135
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(build).steps[10](Summary)
	File: /.github/workflows/build-dotnet.yml:134-158
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[1](Checkout)
	File: /.github/workflows/build-dotnet.yml:60-67
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[2](Setup .NET)
	File: /.github/workflows/build-dotnet.yml:66-72
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[3](Restore)
	File: /.github/workflows/build-dotnet.yml:71-77
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[4](Build)
	File: /.github/workflows/build-dotnet.yml:76-85
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[5](Test)
	File: /.github/workflows/build-dotnet.yml:84-93
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[6](Test Report)
	File: /.github/workflows/build-dotnet.yml:92-101
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[7](Publish)
	File: /.github/workflows/build-dotnet.yml:100-114
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[8](Upload Artifact)
	File: /.github/workflows/build-dotnet.yml:113-121
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[9](Set Result)
	File: /.github/workflows/build-dotnet.yml:120-135
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(build).steps[10](Summary)
	File: /.github/workflows/build-dotnet.yml:134-158
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[1](Checkout)
	File: /.github/workflows/build-dotnet.yml:60-67
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[2](Setup .NET)
	File: /.github/workflows/build-dotnet.yml:66-72
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[3](Restore)
	File: /.github/workflows/build-dotnet.yml:71-77
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[4](Build)
	File: /.github/workflows/build-dotnet.yml:76-85
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[5](Test)
	File: /.github/workflows/build-dotnet.yml:84-93
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[6](Test Report)
	File: /.github/workflows/build-dotnet.yml:92-101
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[7](Publish)
	File: /.github/workflows/build-dotnet.yml:100-114
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[8](Upload Artifact)
	File: /.github/workflows/build-dotnet.yml:113-121
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[9](Set Result)
	File: /.github/workflows/build-dotnet.yml:120-135
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(build).steps[10](Summary)
	File: /.github/workflows/build-dotnet.yml:134-158
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[1](Checkout)
	File: /.github/workflows/build-dotnet.yml:60-67
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[2](Setup .NET)
	File: /.github/workflows/build-dotnet.yml:66-72
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[3](Restore)
	File: /.github/workflows/build-dotnet.yml:71-77
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[4](Build)
	File: /.github/workflows/build-dotnet.yml:76-85
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[5](Test)
	File: /.github/workflows/build-dotnet.yml:84-93
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[6](Test Report)
	File: /.github/workflows/build-dotnet.yml:92-101
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[7](Publish)
	File: /.github/workflows/build-dotnet.yml:100-114
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[8](Upload Artifact)
	File: /.github/workflows/build-dotnet.yml:113-121
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[9](Set Result)
	File: /.github/workflows/build-dotnet.yml:120-135
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(build).steps[10](Summary)
	File: /.github/workflows/build-dotnet.yml:134-158
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/ci-terraform-module.yml:76-122
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-terraform-module.yml:77-88
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-terraform-module.yml:88-103
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-terraform-module.yml:103-122
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-terraform-module.yml:77-88
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-terraform-module.yml:88-103
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-terraform-module.yml:103-122
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-terraform-module.yml:77-88
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-terraform-module.yml:88-103
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-terraform-module.yml:103-122
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/ci-terraform-module.yml:76-122
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/ci-terraform-module.yml:77-88
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/ci-terraform-module.yml:88-103
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release)
	File: /.github/workflows/ci-terraform-module.yml:103-122
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(CI (Terraform Module))
	File: /.github/workflows/ci-terraform-module.yml:7-74
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docker.yml:112-200
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/docker.yml:113-200
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/docker.yml:113-200
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/docker.yml:113-200
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/docker.yml:112-200
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker)
	File: /.github/workflows/docker.yml:113-200
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Docker Build & Push)
	File: /.github/workflows/docker.yml:9-112
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[1](Checkout)
	File: /.github/workflows/docker.yml:120-127
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[2](Download Artifact)
	File: /.github/workflows/docker.yml:126-136
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[3](Docker meta)
	File: /.github/workflows/docker.yml:135-148
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[4](Set up Docker Buildx)
	File: /.github/workflows/docker.yml:147-151
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[5](Login to Registry)
	File: /.github/workflows/docker.yml:150-158
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[6](Build and push)
	File: /.github/workflows/docker.yml:157-174
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docker).steps[7](Summary)
	File: /.github/workflows/docker.yml:173-200
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[1](Checkout)
	File: /.github/workflows/docker.yml:120-127
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[2](Download Artifact)
	File: /.github/workflows/docker.yml:126-136
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[3](Docker meta)
	File: /.github/workflows/docker.yml:135-148
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[4](Set up Docker Buildx)
	File: /.github/workflows/docker.yml:147-151
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[5](Login to Registry)
	File: /.github/workflows/docker.yml:150-158
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[6](Build and push)
	File: /.github/workflows/docker.yml:157-174
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docker).steps[7](Summary)
	File: /.github/workflows/docker.yml:173-200
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[1](Checkout)
	File: /.github/workflows/docker.yml:120-127
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[2](Download Artifact)
	File: /.github/workflows/docker.yml:126-136
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[3](Docker meta)
	File: /.github/workflows/docker.yml:135-148
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[4](Set up Docker Buildx)
	File: /.github/workflows/docker.yml:147-151
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[5](Login to Registry)
	File: /.github/workflows/docker.yml:150-158
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[6](Build and push)
	File: /.github/workflows/docker.yml:157-174
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docker).steps[7](Summary)
	File: /.github/workflows/docker.yml:173-200
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[1](Checkout)
	File: /.github/workflows/docker.yml:120-127
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[2](Download Artifact)
	File: /.github/workflows/docker.yml:126-136
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[3](Docker meta)
	File: /.github/workflows/docker.yml:135-148
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[4](Set up Docker Buildx)
	File: /.github/workflows/docker.yml:147-151
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[5](Login to Registry)
	File: /.github/workflows/docker.yml:150-158
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[6](Build and push)
	File: /.github/workflows/docker.yml:157-174
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docker).steps[7](Summary)
	File: /.github/workflows/docker.yml:173-200
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/_release.yml:13-125
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/_release.yml:14-30
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(test)
	File: /.github/workflows/_release.yml:30-46
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/_release.yml:46-62
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs-site)
	File: /.github/workflows/_release.yml:62-81
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(release)
	File: /.github/workflows/_release.yml:81-107
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(docs-deploy)
	File: /.github/workflows/_release.yml:107-125
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/_release.yml:14-30
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(test)
	File: /.github/workflows/_release.yml:30-46
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/_release.yml:46-62
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs-site)
	File: /.github/workflows/_release.yml:62-81
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(release)
	File: /.github/workflows/_release.yml:81-107
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(docs-deploy)
	File: /.github/workflows/_release.yml:107-125
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/_release.yml:14-30
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(test)
	File: /.github/workflows/_release.yml:30-46
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/_release.yml:46-62
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs-site)
	File: /.github/workflows/_release.yml:62-81
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(release)
	File: /.github/workflows/_release.yml:81-107
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(docs-deploy)
	File: /.github/workflows/_release.yml:107-125
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/_release.yml:13-125
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(lint)
	File: /.github/workflows/_release.yml:14-30
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(test)
	File: /.github/workflows/_release.yml:30-46
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs)
	File: /.github/workflows/_release.yml:46-62
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs-site)
	File: /.github/workflows/_release.yml:62-81
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(release)
	File: /.github/workflows/_release.yml:81-107
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(docs-deploy)
	File: /.github/workflows/_release.yml:107-125
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(Release)
	File: /.github/workflows/_release.yml:5-11
Check: CKV_GHA_5: "Found artifact build without evidence of cosign sign execution in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/oci-push.yml:106-313
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push)
	File: /.github/workflows/oci-push.yml:107-313
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push)
	File: /.github/workflows/oci-push.yml:107-313
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push)
	File: /.github/workflows/oci-push.yml:107-313
Check: CKV_GHA_6: "Found artifact build without evidence of cosign sbom attestation in pipeline"
	PASSED for resource: jobs
	File: /.github/workflows/oci-push.yml:106-313
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push)
	File: /.github/workflows/oci-push.yml:107-313
Check: CKV_GHA_7: "The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. "
	PASSED for resource: on(OCI Push)
	File: /.github/workflows/oci-push.yml:9-106
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/oci-push.yml:114-121
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/oci-push.yml:120-130
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[3](Install ORAS)
	File: /.github/workflows/oci-push.yml:129-135
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[4](Docker meta (version tags))
	File: /.github/workflows/oci-push.yml:134-147
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[5](Determine Tags)
	File: /.github/workflows/oci-push.yml:146-184
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[6](Login to Registry)
	File: /.github/workflows/oci-push.yml:183-195
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[7](Pack Artifact)
	File: /.github/workflows/oci-push.yml:194-206
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[8](Push Artifact)
	File: /.github/workflows/oci-push.yml:205-281
Check: CKV_GHA_2: "Ensure run commands are not vulnerable to shell injection"
	PASSED for resource: jobs(push).steps[9](Summary)
	File: /.github/workflows/oci-push.yml:280-313
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/oci-push.yml:114-121
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/oci-push.yml:120-130
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[3](Install ORAS)
	File: /.github/workflows/oci-push.yml:129-135
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[4](Docker meta (version tags))
	File: /.github/workflows/oci-push.yml:134-147
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[5](Determine Tags)
	File: /.github/workflows/oci-push.yml:146-184
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[6](Login to Registry)
	File: /.github/workflows/oci-push.yml:183-195
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[7](Pack Artifact)
	File: /.github/workflows/oci-push.yml:194-206
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[8](Push Artifact)
	File: /.github/workflows/oci-push.yml:205-281
Check: CKV_GHA_4: "Suspicious use of netcat with IP address"
	PASSED for resource: jobs(push).steps[9](Summary)
	File: /.github/workflows/oci-push.yml:280-313
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/oci-push.yml:114-121
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/oci-push.yml:120-130
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[3](Install ORAS)
	File: /.github/workflows/oci-push.yml:129-135
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[4](Docker meta (version tags))
	File: /.github/workflows/oci-push.yml:134-147
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[5](Determine Tags)
	File: /.github/workflows/oci-push.yml:146-184
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[6](Login to Registry)
	File: /.github/workflows/oci-push.yml:183-195
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[7](Pack Artifact)
	File: /.github/workflows/oci-push.yml:194-206
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[8](Push Artifact)
	File: /.github/workflows/oci-push.yml:205-281
Check: CKV_GHA_1: "Ensure ACTIONS_ALLOW_UNSECURE_COMMANDS isn't true on environment variables"
	PASSED for resource: jobs(push).steps[9](Summary)
	File: /.github/workflows/oci-push.yml:280-313
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[1](Checkout)
	File: /.github/workflows/oci-push.yml:114-121
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[2](Download Artifact)
	File: /.github/workflows/oci-push.yml:120-130
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[3](Install ORAS)
	File: /.github/workflows/oci-push.yml:129-135
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[4](Docker meta (version tags))
	File: /.github/workflows/oci-push.yml:134-147
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[5](Determine Tags)
	File: /.github/workflows/oci-push.yml:146-184
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[6](Login to Registry)
	File: /.github/workflows/oci-push.yml:183-195
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[7](Pack Artifact)
	File: /.github/workflows/oci-push.yml:194-206
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[8](Push Artifact)
	File: /.github/workflows/oci-push.yml:205-281
Check: CKV_GHA_3: "Suspicious use of curl with secrets"
	PASSED for resource: jobs(push).steps[9](Summary)
	File: /.github/workflows/oci-push.yml:280-313

GITHUB_ACTIONS_ZIZMOR

�[1m�[91merror[github-app]�[0m�[1m: dangerous use of GitHub App tokens�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/lint.yml:82:15
   �[1m�[94m|�[0m
�[1m�[94m82�[0m �[1m�[94m|�[0m         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
   �[1m�[94m|�[0m               �[1m�[91m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91mapp token inherits blanket installation permissions�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mtip�[0m: specify at least one `permission-<name>` input to limit the token's permissions
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#github-app�[39m

�[1m�[91merror[github-app]�[0m�[1m: dangerous use of GitHub App tokens�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/release.yml:146:15
    �[1m�[94m|�[0m
�[1m�[94m146�[0m �[1m�[94m|�[0m         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
    �[1m�[94m|�[0m               �[1m�[91m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91mapp token inherits blanket installation permissions�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mtip�[0m: specify at least one `permission-<name>` input to limit the token's permissions
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#github-app�[39m

�[32m76�[39m findings (�[1m�[93m74�[39m suppressed�[0m): �[35m0�[39m informational, �[36m0�[39m low, �[33m0�[39m medium, �[31m2�[39m high�[32m INFO�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 zizmor v1.25.2
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/_docs-preview-cleanup.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/_release.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/_test.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/build-dotnet.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/cd-docker-helm.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/ci-action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/ci-dotnet.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/ci-terraform-module.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/deploy-helm.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docker.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docs-action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docs-mkdocs.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docs-terraform.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/helm-push.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/lint.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/oci-push.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/oras-tag.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/release.yml

renovate Bot enabled auto-merge (squash) July 26, 2026 03:11

renovate Bot force-pushed the renovate/super-linter-super-linter-8.x branch 9 times, most recently from 234bf98 to 41bdbeb Compare July 28, 2026 13:49

chore(deps): update super-linter/super-linter action to v8.7.0

8508b14

renovate Bot force-pushed the renovate/super-linter-super-linter-8.x branch from 41bdbeb to 8508b14 Compare July 29, 2026 12:44

Navigation Menu

Uh oh!

chore(deps): update super-linter/super-linter action to v8.7.0 - #22

chore(deps): update super-linter/super-linter action to v8.7.0#22
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/super-linter-super-linter-8.x

renovate Bot commented Jul 26, 2026

Uh oh!

semrel-infinite-automations Bot commented Jul 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 26, 2026

Release Notes

v8.7.0

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

🧰 Maintenance

Configuration

Uh oh!

semrel-infinite-automations Bot commented Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Super-linter summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v8.7.0`

semrel-infinite-automations Bot commented Jul 26, 2026 •

edited

Loading