Skip to content

Fix/image CVE refresh - #744

Merged
wdower merged 7 commits into
masterfrom
fix/image-cve-refresh
Jul 31, 2026
Merged

Fix/image CVE refresh#744
wdower merged 7 commits into
masterfrom
fix/image-cve-refresh

harden: enforce HTTPS on build-time curl downloads (Sonar S6506)

e21fd91
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / SonarCloud succeeded Jul 31, 2026 in 6s

No new alerts in code changed by this pull request

View all branch alerts.

Annotations

Check warning on line 52 in .github/actions/setup-ruby-source/action.yml

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not enforcing HTTPS here might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 120 in Dockerfile

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not enforcing HTTPS here might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 141 in Dockerfile

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not enforcing HTTPS here might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 160 in Dockerfile

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not enforcing HTTPS here might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 161 in Dockerfile

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not enforcing HTTPS here might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud