Update actions/setup-python action to v7 - #1123
Quality Gate failed
Failed conditions
C Security Rating on New Code (required ≥ A)
See analysis details on SonarQube Cloud
Catch issues before they fail your Quality Gate with our IDE extension
SonarQube for IDE
Annotations
Check warning on line 24 in .github/workflows/autoformat-pixeebot-prs.yaml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75Fxezt7eMS3Rmt&open=AZ_jC75Fxezt7eMS3Rmt&pullRequest=1123
Check warning on line 24 in .github/workflows/autoformat-pixeebot-prs.yaml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75Fxezt7eMS3Rmu&open=AZ_jC75Fxezt7eMS3Rmu&pullRequest=1123
Check warning on line 75 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmz&open=AZ_jC75cxezt7eMS3Rmz&pullRequest=1123
Check warning on line 36 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmv&open=AZ_jC75cxezt7eMS3Rmv&pullRequest=1123
Check warning on line 56 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmy&open=AZ_jC75cxezt7eMS3Rmy&pullRequest=1123
Check warning on line 37 in .github/workflows/integration_test.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm-&open=AZ_jC76yxezt7eMS3Rm-&pullRequest=1123
Check warning on line 35 in .github/workflows/integration_test.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm8&open=AZ_jC76yxezt7eMS3Rm8&pullRequest=1123
Check warning on line 77 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rm1&open=AZ_jC75cxezt7eMS3Rm1&pullRequest=1123
Check warning on line 56 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmx&open=AZ_jC75cxezt7eMS3Rmx&pullRequest=1123
Check warning on line 33 in .github/workflows/lint.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC77Hxezt7eMS3RnA&open=AZ_jC77Hxezt7eMS3RnA&pullRequest=1123
Check warning on line 34 in .github/workflows/codemod_pygoat.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm6&open=AZ_jC76hxezt7eMS3Rm6&pullRequest=1123
Check warning on line 21 in .github/workflows/deploy_to_pypi.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC72Pxezt7eMS3Rmr&open=AZ_jC72Pxezt7eMS3Rmr&pullRequest=1123
Check warning on line 37 in .github/workflows/integration_test.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm9&open=AZ_jC76yxezt7eMS3Rm9&pullRequest=1123
Check warning on line 32 in .github/workflows/codemod_pygoat.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm3&open=AZ_jC76hxezt7eMS3Rm3&pullRequest=1123
Check warning on line 36 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmw&open=AZ_jC75cxezt7eMS3Rmw&pullRequest=1123
Check warning on line 34 in .github/workflows/codemod_pygoat.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm5&open=AZ_jC76hxezt7eMS3Rm5&pullRequest=1123
Check warning on line 33 in .github/workflows/lint.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC77Hxezt7eMS3Rm_&open=AZ_jC77Hxezt7eMS3Rm_&pullRequest=1123
Check warning on line 21 in .github/workflows/deploy_to_pypi.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC72Pxezt7eMS3Rms&open=AZ_jC72Pxezt7eMS3Rms&pullRequest=1123
Check warning on line 77 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rm2&open=AZ_jC75cxezt7eMS3Rm2&pullRequest=1123
Check warning on line 35 in .github/workflows/integration_test.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm7&open=AZ_jC76yxezt7eMS3Rm7&pullRequest=1123
Check warning on line 32 in .github/workflows/codemod_pygoat.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm4&open=AZ_jC76hxezt7eMS3Rm4&pullRequest=1123
Check warning on line 75 in .github/workflows/test.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rm0&open=AZ_jC75cxezt7eMS3Rm0&pullRequest=1123