ah-ha-admin / refactored-memory

• 👋 Hi, I’m @ah-ha-admin
• 👀 I’m interested in ... IOs and Android+VScode.dev and low-code apps developpement in DEV environnements only.
• 🌱 I’m currently learning ... The Above👆
• 💞️ I’m looking to collaborate on ... My own.
• 📫 How to reach me ... Biiiiiiiip.

refactored-memory's Issues

First code issue type

Commit files

2697dad

### Edited/Blocked Notification

          ### Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

Originally posted by @renovate[bot] in #373 (comment)

:warning: We detected 201 security issues in this pull request:

⚠️ We detected 201 security issues in this pull request:

Mode: paranoid | Total findings: 201 | Considered vulnerability: 201

Hard-Coded Secrets (11)

Severity	Details	Docs
Medium	Title: Hex High Entropy String https://github.com/ah-ha-admin/refactored-memory/blob/e01d08f1adb849358e406a693a637943121fd4f9/##SomeNotes#L213	📚
Medium	Title: Hex High Entropy String refactored-memory/AndroidManifest.xml Line 6 in e01d08f android:value="85f50898a1464d76bc44963336a8a5ec" />	📚
Medium	Title: Base64 High Entropy String refactored-memory/nuget.config Line 10 in e01d08f <addkey="ClearTextPassword"value="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"/>	📚
Medium	Title: StackHawk API Key refactored-memory/.github/workflows/stackhawk.yml Line 1 in e01d08f # -- stackhawk configuration for hawk.Pef2X0hP8ryJcWfE23Mt.g1vMt73kbxSNZrRdCazs --	📚
Medium	Title: StackHawk API Key refactored-memory/.github/workflows/stackhawk.yml Line 93 in e01d08f # -- stackhawk configuration for hawk.Pef2X0hP8ryJcWfE23Mt.g1vMt73kbxSNZrRdCazs --	📚
Medium	Title: New GitHub Token Format refactored-memory/.github/Sexflixxxvip00/nuget.config Line 10 in e01d08f <add key="ClearTextPassword" value="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" />	📚
Medium	Title: New GitHub Token Format refactored-memory/.github/action.yml Line 16 in e01d08f token: ${{ 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 }}	📚
Medium	Title: New GitHub Token Format refactored-memory/.github/nuget.config Line 10 in e01d08f <add key="ClearTextPassword" value="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" />	📚
Medium	Title: New GitHub Token Format refactored-memory/.github/workflows/action.yml Line 512 in e01d08f "oidc_token": "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"	📚
Medium	Title: New GitHub Token Format refactored-memory/.github/workflows/nuget.config Line 10 in e01d08f <add key="ClearTextPassword" value="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" />	📚
Medium	Title: New GitHub Token Format refactored-memory/.github/workflows/static.yml Line 9 in e01d08f token: ${{ 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 }}	📚

More info on how to fix Hard-Coded Secrets in General.

---

Vulnerable Libraries (188)

Severity	Details
N/A	pkg:golang/golang.org/x/[email protected]@v0.3.1-0.20180807135948-17ff2d5776d2 upgrade to: 0.3.3
Medium	pkg:golang/github.com/yuin/[email protected]@v1.1.27 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190422165155-953cdadca894 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190412213103-97732733099d upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.3.7 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220617184016-355a448f1bc9 upgrade to: 0.1.1-0.20221104162952-702349b0e862
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210119194325-5f4716e94777 - no patch available
High	pkg:gem/[email protected]@4.7.1 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191209160850-c0dbc17a3553 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20170915032832-14c0d48ead0c upgrade to: 0.3.7
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190507160741-ecd444e8653b upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/gopkg.in/[email protected]@v2.2.8 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210823070655-63515b42dcdf upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191204072324-ce4227a45e2e upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211210111614-af8b64212486 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190924154521-2837fb4f24fe upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200523222454-059865788121 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210423185535-09eb48e85fd7 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210315160823-c6e025ad8005 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210410081132-afb366fc7cd1 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210320140829-1e4c9ba3b0c4 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200113162924-86b910548bc1 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/gopkg.in/[email protected]@v3.0.0-20200313102051-9f266ea9e77c upgrade to: 3.0.0
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211013075003-97ac67df715c upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220225172249-27dd8689420f - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210806184541-e5e7981a1069 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211216021012-1d35b9e2eb4e upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/prometheus/[email protected]@v0.9.1 upgrade to: 1.11.1
Medium	pkg:gem/[email protected]@6.5.0 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201209123823-ac852fbbde11 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190624142023-c5567b49c5d0 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220607020251-c690dde0001d upgrade to: 1.18.6,1.19.1,0.0.0-20220906165146-f3363e06e74c
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220128215802-99c3d69c2c27 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210316092652-d523dce5a7f4 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200114155413-6afb5195e5aa upgrade to: 0.0.0-20210520170846-37e1c6afe023
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210124154548-22da62e12c0c upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/prometheus/[email protected]@v1.4.0 upgrade to: 1.11.1
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200615200032-f1bc736245b1 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191001151750-bb3f8db39f24 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211124211545-fe61309f8881 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/gopkg.in/[email protected]@v2.2.4 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191026070338-33540a1f6037 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191008105621-543471e840be upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/gopkg.in/[email protected]@v2.4.0 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220328115105-d36c6a25d886 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
Medium	pkg:gem/[email protected]@7.0.4 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200501053045-e0ff5e5a1de5 upgrade to: 1.18.6,1.19.1,0.0.0-20220906165146-f3363e06e74c
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190227222117-0694c2d4d067 upgrade to: 0.5.0
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210908233432-aa78b53d3365 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/miekg/[email protected]@v1.1.41 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210927094055-39ccf1dd6fa6 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200331124033-c3d80250170d upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200212091648-12a6c2dcc1e4 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20180826012351-8a410e7b638d upgrade to: 0.0.0-20190125002852-4b62a64f59f7,0.0.0-20190125002852-4b62a64f59f7
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220425223048-2871e0cb64e4 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210303074136-134d130e1a04 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190502145724-3ef323f4f1fd upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200122134326-e047566fdf82 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200506145744-7e3656a0809f - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200511232937-7e40ca221e25 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190509141414-a5b02f93d862 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201201145000-ef89a241ccb3 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20180830151530-49385e6e1522 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210603081109-ebe580a85c40 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211216030914-fe4d6282115f upgrade to: 0.7.0
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220325170049-de3da57026de - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210104204734-6f8348627aad upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220319134239-a9b59b0215f8 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20180823144017-11551d06cbcc upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210514084401-e8d321eab015 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220209214540-3681064d5158 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211112202133-69e39bad7dc2 upgrade to: 1.16.12,1.17.5,0.0.0-20211209124913-491a49abca63
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200515095857-1151b9dac4a9 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/prometheus/[email protected]@v1.7.1 upgrade to: 1.11.1
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190922100055-0a153f010e69 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200803210538-64077c9b5642 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220722155237-a158d28d115b upgrade to: 1.18.9,1.19.4,0.4.0
Medium	pkg:golang/github.com/yuin/[email protected]@v1.1.25 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210305230114-8fe3ee5dd75b upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20221014081412-f15817d10f9b upgrade to: 0.7.0
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210330210617-4fbd30eecc44 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/gopkg.in/[email protected]@v2.3.0 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200501052902-10377860bb8e upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220227234510-4e6760a101f9 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200905004654-be1d3432aa8f upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
Medium	pkg:gem/[email protected]@7.0.4 - no patch available
High	pkg:golang/gopkg.in/[email protected]@v2.2.5 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220624214902-1bab6f366d9e upgrade to: 1.18.6,1.19.1,0.0.0-20220906165146-f3363e06e74c
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210220050731-9a76102bfb43 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200831180312-196b9ba8737a upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/hashicorp/consul/[email protected]@v0.11.0 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190215142949-d0b11bdaac8a upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
Medium	pkg:golang/github.com/yuin/[email protected]@v1.1.32 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190312061237-fead79001313 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190726091711-fc99dfbffb4e upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200223170610-d5e6a3e2c0ae upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
Low	pkg:gem/[email protected]@7.0.4 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210616094352-59db8d763f22 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190503192946-f4e77d36d62c upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200116001909-b77594299b42 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210423082822-04245dca01da upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201031054903-ff519b6c9102 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210225134936-a50acf3fe073 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210603125802-9665404d3644 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200301022130-244492dfa37a upgrade to: 1.18.9,1.19.4,0.4.0
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210615035016-665e8c7367d1 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/hashicorp/consul/[email protected]@v1.15.3 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200707034311-ab3426394381 upgrade to: 1.18.9,1.19.4,0.4.0
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210630005230-0f9fa26af87c upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220909164309-bea034e7d591 upgrade to: 0.1.1-0.20221104162952-702349b0e862
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20180905080454-ebe1bf3edb33 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220127200216-cd36cc0744dd - no patch available
High	pkg:golang/gopkg.in/[email protected]@v3.0.0-20210107192922-496545a6307b upgrade to: 3.0.0
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190923162816-aa69164e4478 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20181116152217-5ac8a444bdc5 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
Critical	pkg:golang/github.com/gogo/[email protected]@v1.3.2 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190802002840-cff245a6509b upgrade to: 0.5.0
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190628185345-da137c7871d7 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
High	pkg:gem/[email protected]@1.1.9 - no patch available
N/A	pkg:golang/gopkg.in/[email protected]@v2.2.2 upgrade to: 2.2.3
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190606165138-5da285871e9c upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190222072716-a9d3bda3a223 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190603091049-60506f45cf65 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200202164722-d101bd2416d5 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201119102817-f84b799fce68 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200822124328-c89045814202 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201110031124-69a78807bb2b - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200106162015-b016eb3dc98e upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210405180319-a5a99cb37ef4 - no patch available
High	pkg:gem/[email protected]@1.0.0 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200625212154-ddb9806d33ae upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200930185726-fdedc70b468f upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/miekg/[email protected]@v1.1.26 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210226172049-e18ecbb05110 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191228213918-04cbcbbfeed8 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210403161142-5e06dd20ab57 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210119212857-b64e53b001e4 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201224014010-6772e930b67b - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210510120138-977fb7262007 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/github.com/prometheus/[email protected]@v1.0.0 upgrade to: 1.11.1
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200302150141-5c8b2ff67527 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A	pkg:golang/golang.org/x/[email protected] @v0.0.0-20221014081412-f15817d10f9b upgrade to: 0.7.0
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200323222414-85ca7c5b95cd upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
High	pkg:golang/golang.org/x/[email protected]@v0.3.3 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210503060351-7fd8e65b6420 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20201021035429-f5854403a974 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.3.2 upgrade to: 0.3.3
High	pkg:golang/golang.org/x/[email protected]@v0.3.5 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190620200207-3b0461eec859 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
Low	pkg:gem/[email protected]@7.0.4 - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190108225652-1e06a53dbb7e upgrade to: 0.0.0-20190125002852-4b62a64f59f7
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190213061140-3a22650c66bd upgrade to: 0.0.0-20210520170846-37e1c6afe023
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200520182314-0ba52f642ac2 upgrade to: 0.0.0-20210520170846-37e1c6afe023
Medium	pkg:golang/golang.org/x/[email protected]@v0.3.4 - no patch available
Medium	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210921155107-089bfa567519 - no patch available
High	pkg:golang/gopkg.in/[email protected]@v2.2.3 upgrade to: 2.2.4
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190404232315-eb5bcb51f2a3 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200222125558-5a598a2470a0 - no patch available
High	pkg:gem/[email protected]@7.0.4 - no patch available
N/A	pkg:golang/gopkg.in/[email protected]@v2.2.1 upgrade to: 2.2.3
High	pkg:golang/github.com/docker/[email protected][email protected]+incompatible upgrade to: 20.10.24,23.0.3
Medium	pkg:gem/[email protected]@2.2.5 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190308221718-c2843e01d9a2 upgrade to: 0.0.0-20200220183623-bac4c82f6975
Medium	pkg:golang/golang.org/x/[email protected]@v0.0.0-20210421170649-83a5a9bb288b - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20180904163835-0709b304e793 upgrade to: 0.0.0-20190320223903-b7391e95e576
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200324143707-d3edc9973b7e - no patch available
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190605123033-f99c8df09eb5 upgrade to: 0.0.0-20201216223049-8b5274cf687f
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200226121028-0de0cce0169b - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20191011191535-87dc89f01550 upgrade to: 0.0.0-20211202192323-5770296d904e
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200625001655-4c5254603344 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190501004415-9ce7a6920f09 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190613194153-d28f0bde5980 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200202094626-16171245cfb2 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.3.6 - no patch available
Medium	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190506204251-e1dfcc566284 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20220412020605-290c469a71a5 - no patch available
Medium	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200622213623-75b288015ac9 - no patch available
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20181114220301-adae6a3d119a upgrade to: 0.0.0-20190125002852-4b62a64f59f7,0.0.0-20190125002852-4b62a64f59f7
High	pkg:golang/github.com/gogo/[email protected]@v1.1.1 upgrade to: 1.3.2
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190724013045-ca1201d0de80 upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
High	pkg:golang/golang.org/x/[email protected]@v0.3.0 upgrade to: 0.3.3
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190923035154-9ee001bba392 upgrade to: 0.0.0-20220314234659-1baeb1ce4c0b
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190510104115-cbcb75029529 upgrade to: 0.0.0-20211202192323-5770296d904e
High	pkg:golang/github.com/docker/[email protected]+incompatible @v20.10.21+incompatible upgrade to: 20.10.24,23.0.3
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20180724234803-3673e40ba225 upgrade to: 0.0.0-20190125002852-4b62a64f59f7,0.0.0-20190125002852-4b62a64f59f7
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20190311183353-d8887717615a upgrade to: 0.0.0-20190813141303-74dc4d7220e7,0.0.0-20190813141303-74dc4d7220e7
N/A	pkg:golang/golang.org/x/[email protected]@v0.0.0-20211108221036-ceb1ce70b4fa upgrade to: 0.0.0-20220314234659-1baeb1ce4c0b
High	pkg:golang/golang.org/x/[email protected]@v0.0.0-20200513185701-a91f0712d120 - no patch available

More info on how to fix Vulnerable Libraries in Go and Ruby.

---

Insecure Use of Dangerous Function (2)

Severity	Details	Docs
High	Title: Non-static OS command execution refactored-memory/.github/workflows/setup.rb Line 16 in e01d08f exec(*cmd)	📚
High	Title: Non-static OS command execution refactored-memory/setup.rb Line 16 in e01d08f exec(*cmd)	📚

More info on how to fix Insecure Use of Dangerous Function in Ruby.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Originally posted by @guardrails in #398 (comment)

Fix code scanning alert - Use -n instead of ! -z.

Tracking issue for:

• https://github.com/ah-ha-admin/refactored-memory/security/code-scanning/18

.devccontainers

vs code extensions within codespace

Error loading webview: Error: Could not register service workers: NotSupportedError: Failed to register a ServiceWorker for scope ('https://07jui2prh42dtve2cdaattv4g8hf0g6baatn5dci2n7p3v3cs3b9.vscode-cdn.net/stable/6261075646f055b99068d3688932416f2346dd3b/out/vs/workbench/contrib/webview/browser/pre/') with script ('https://07jui2prh42dtve2cdaattv4g8hf0g6baatn5dci2n7p3v3cs3b9.vscode-cdn.net/stable/6261075646f055b99068d3688932416f2346dd3b/out/vs/workbench/contrib/webview/browser/pre/service-worker.js?v=4&vscode-resource-base-authority=vscode-resource.vscode-cdn.net&remoteAuthority=codespaces+ah-ha-admin-special-bassoon-qrvvv55v9wrcgj9'): The user denied permission to use Service Worker..
what does thatmeans ????
@github

ms-vscode.dev

#7 ##

allow:all /

features

bug

Run actions/setup-java@v3

2 with:

3 java-version: 11

4 distribution: temurin

5 cache: gradle

6 java-package: jdk

7 check-latest: false

8 server-id: github

9 server-username: GITHUB_ACTOR

10 server-password: GITHUB_TOKEN

11 overwrite-settings: true

12 job-status: success

13 token: ***

14Installed distributions

25Creating settings.xml with server-id: github

26Writing to /home/runner/.m2/settings.xml

27Error: No file in /home/runner/work/refactored-memory/refactored-memory matched to [/.gradle,/gradle-wrapper.properties,buildSrc//Versions.kt,buildSrc//Dependencies.kt,gradle/*.versions.toml], make sure you have checked out the target repository

Label

#49

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update docker/login-action digest to 0d4c9c5
• Update docker/setup-buildx-action digest to 5138f76
• Update fortify/gha-export-vulnerabilities digest to d2838d7
• Update fortify/gha-setup-fod-uploader digest to e633769
• Update fortify/gha-setup-scancentral-client digest to f4282a5
• Update gradle/gradle-build-action digest to 66535aa
• Update install-pinned/autoflake digest to eefdf26
• Update install-pinned/pyupgrade digest to efde3dc
• Update install-pinned/reorder_python_imports digest to 9397de6
• Update nowsecure/nowsecure-action digest to 901b53b
• Update nowsecure/nowsecure-sbom-action digest to e64cb6d
• Update pypa/gh-action-pypi-publish digest to ec4db0b
• Update r-lib/actions digest to fbafc3b
• Update soos-io/soos-dast-github-action digest to a7f2cb2
• Update sysdiglabs/scan-action digest to 07d6420
• Update zimperium/zscanmarketplace digest to 702af28
• Update Logflare/action action to v1.1.6
• Update actions/cache action to v3.3.3
• Update actions/upload-artifact action to v3.1.3
• Update appCenterSdkVersion to v5.0.4 (com.microsoft.appcenter:appcenter-distribute, com.microsoft.appcenter:appcenter-crashes, com.microsoft.appcenter:appcenter-analytics)
• Update devops-actions/load-available-actions action to v2.1.16
• Update erlang Docker tag to v25.3.2
• Update microsoft/setup-msbuild action to v1.3.3
• Update module github.com/docker/docker/v23 to v23.0.12
• Update module github.com/go-enry/go-enry/v2 to v2.8.8
• Update module github.com/liamg/clinch to v1.6.6
• Update module github.com/mattn/go-isatty to v0.0.20
• Update module github.com/pterm/pterm to v0.12.79
• Update module github.com/sirupsen/logrus to v1.9.3
• Update OctopusDeploy/install-octopus-cli-action action to v3.1.1
• Update actions/checkout action to v2.7.0
• Update actions/setup-java action to v3.13.0
• Update actions/setup-node action to v3.8.2
• Update azure/login action to v1.6.1
• Update dependency ex_doc to ~> 0.34
• Update dependency rubocop to "~> 1.64.0"
• Update dependency ruby to v3.3.3
• Update module github.com/owenrumney/go-sarif/v2 to v2.3.1
• Update module github.com/spf13/cobra to v1.8.1
• Update module github.com/spf13/viper to v1.19.0
• Update pnpm/action-setup action to v2.4.0
• Update ruby/setup-ruby action to v1.180.1
• Update sigstore/cosign-installer action to v3.5.0
• Update slsa-framework/slsa-github-generator action to v1.10.0
• Update stackhawk/hawkscan-action action to v2.1.3
• Update Azure/k8s-deploy action to v5
• Update GitHub Artifact Actions to v4 (major) (actions/download-artifact, actions/upload-artifact)
• Update actions/cache action to v4
• Update actions/checkout action to v4
• Update actions/configure-pages action to v5
• Update actions/dependency-review-action action to v4
• Update actions/deploy-pages action to v4
• Update actions/setup-dotnet action to v4
• Update actions/setup-go action to v5
• Update actions/setup-java action to v4
• Update actions/setup-node action to v4
• Update actions/setup-python action to v5
• Update actions/stale action to v9
• Update actions/upload-pages-artifact action to v3
• Update aws-actions/amazon-ecr-login action to v2
• Update aws-actions/configure-aws-credentials action to v4
• Update azure/aks-set-context action to v4
• Update azure/login action to v2
• Update azure/webapps-deploy action to v3
• Update dependency launchy to v3
• Update dependency ubuntu to v22
• Update erlang Docker tag to v27
• Update github/codeql-action action to v3
• Update github/super-linter action to v6
• Update gradle/wrapper-validation-action action to v3
• Update hashicorp/actions-docker-build action to v2
• Update hashicorp/setup-terraform action to v3
• Update microsoft/setup-msbuild action to v2
• Update module github.com/docker/docker/v23 to v26
• Update peaceiris/actions-gh-pages action to v4
• Update peaceiris/actions-hugo action to v3
• Update pnpm/action-setup action to v4
• Update postgres Docker tag to v16
• Update slsa-framework/slsa-github-generator action to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package actions/checkout-dart-lang, Could not determine new digest for update (github-tags package stackhapwk/hawkscan-action).

Files affected: .github/workflows/dart.yml, .github/workflows/stackhawk.yml

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update advanced-security/maven-dependency-submission-action digest to 1203a18
• Update anchore/scan-action digest to d09e278
• Update apisec-inc/apisec-run-scan digest to 8f66ce9
• Update aquasecurity/trivy-action digest to 7c2007b
• Update codacy/codacy-analysis-cli-action digest to 740bfaa
• Update dart-lang/setup-dart digest to 2986c8e
• Update docker/build-push-action digest to 94f8f8c
• Update docker/metadata-action digest to f7b4ed1
• Update install-pinned/black digest to c37af12
• Update jfrog/frogbot digest to d01623d
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update tj-actions/changed-files action to v36 [SECURITY]
• Update MobSF/mobsfscan digest to 849b749
• Update ajinabraham/njsscan-action digest to 74e5a58
• Update autofix-ci/action digest to ea32e3a
• Update checkmarx-ts/checkmarx-cxflow-github-action digest to 4f66c61
• Update actions/checkout action to v3.6.0

Detected dependencies

bundler

Gemfile

• gems '~> 1.2'
• rake "~> 13.0"
• launchy "~> 2.3"
• nokogiri "~> 1.7"
• rubocop "~> 1.50.0"
• http_parser.rb "~> 0.8.0"
• jekyll-feed "~> 0.9"
• mime-types "~> 3.0"
• psych "~> 5.0"
• rdoc "~> 6.0"
• classifier-reborn "~> 2.2"
• liquid-c "~> 4.0"
• yajl-ruby "~> 1.4"
• html-proofer "~> 5.0"

circleci

.circleci/config.yml

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/devcontainers/anaconda 0-3

github-actions

.github/action.yml

• actions/checkout v3

.github/workflows/.bazelrc.yml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/.cirun.yml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/.gitpod.yml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/.goreleaser.yaml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/.rubocop.yml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/.unibeautifyrc.yml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/Logflare.yml

• Logflare/action v1.1.2

.github/workflows/action.yml

• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• actions/upload-artifact v3
• romoh/dependencies-autoupdate v1.2
• CashStory/setup-cd-tools v1.0.2
• actions/setup-node v3.6.0
• actions/checkout v3.5.1
• actions/checkout v3
• actions/checkout v3.5.1
• pnpm/action-setup v2.2.4
• actions/cache v3
• actions/setup-node v3.6.0
• jitterbit/get-changed-files v1
• actions/setup-node v3.6.0
• actions/setup-node v3.6.0
• gradle/wrapper-validation-action v1
• actions/checkout v3
• actions/setup-go v4
• actions/setup-node v3.6.0
• actions/checkout v3
• actions/checkout v3.5.1
• pnpm/action-setup v2.2.4
• actions/cache v3
• actions/setup-node v3.6.0
• jitterbit/get-changed-files v1
• actions/setup-node v3.6.0
• actions/setup-node v3.6.0
• gradle/wrapper-validation-action v1
• actions/checkout v3
• actions/setup-go v4
• actions/setup-node v3.6.0
• actions/checkout v3
• actions/checkout v3.5.1
• pnpm/action-setup v2.2.4
• actions/cache v3
• actions/setup-node v3.6.0
• jitterbit/get-changed-files v1
• actions/setup-node v3.6.0
• actions/setup-node v3.6.0
• gradle/wrapper-validation-action v1
• actions/checkout v3
• actions/setup-go v4
• actions/setup-node v3.6.0
• actions/checkout v3
• actions/checkout v3.5.1
• pnpm/action-setup v2.2.4
• actions/cache v3
• actions/setup-node v3.6.0
• jitterbit/get-changed-files v1
• actions/setup-node v3.6.0
• actions/setup-node v3.6.0
• gradle/wrapper-validation-action v1
• actions/checkout v3
• actions/setup-go v4
• actions/checkout v3
• actions/upload-artifact v3
• actions/checkout v3
• lannonbr/repo-permission-check-action 2.0.2
• devops-actions/load-available-actions v2.1.5

.github/workflows/actions/checkout.yml

• actions/checkout v2.6.0

.github/workflows/altostra-ci.yaml

• lannonbr/repo-permission-check-action 2.0.2
• actions/setup-node v3
• actions/checkout v3

.github/workflows/anchore.yml

• actions/checkout v3
• anchore/scan-action abdc9eb47b6c4e4f4764bc4b6cb6c1fe07472e4e
• github/codeql-action v2

.github/workflows/android.yml

• actions/checkout v3
• actions/setup-java v3
• actions/setup-java v3.11.0
• actions/checkout v3
• actions/setup-node v3
• lannonbr/repo-permission-check-action 2.0.2
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/apisec-scan.yml

• apisec-inc/apisec-run-scan 22aac1067678b5aa0a6f30dfda573e2d4cd76652
• github/codeql-action v2
• actions/checkout v3
• lannonbr/repo-permission-check-action 2.0.2
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/application.yml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/autofix-ci.yml

• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• actions/setup-go v4
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• actions/setup-node v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• lannonbr/repo-permission-check-action 2.0.2
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/azure-devops-project-url.yml

• Azure/pipelines v1
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/azure-kubernetes-service.yml

• actions/checkout v3
• azure/login v1.4.7
• actions/checkout v3
• azure/login v1.4.7
• azure/aks-set-context v3
• Azure/k8s-deploy v4

.github/workflows/azure-pipelines.yml

• Azure/pipelines v1
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/azure-webapps-dotnet-core.yml

• actions/checkout v3
• actions/setup-dotnet v3
• actions/cache v3
• actions/upload-artifact v3
• actions/download-artifact v3
• azure/webapps-deploy v2

.github/workflows/build-api-docs.yml

• actions/checkout v3
• actions/upload-artifact v3
• actions/upload-artifact v3
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/build-website.yml

• actions/checkout v3
• actions/setup-node v3
• actions/upload-artifact v3
• actions/upload-artifact v3

.github/workflows/build.yml

• actions/checkout v3
• actions/upload-artifact v3
• actions/checkout v3
• actions/checkout v3
• actions/checkout v3
• hashicorp/actions-generate-metadata v1
• actions/upload-artifact v3
• actions/checkout v3
• actions/setup-go v4
• actions/upload-artifact v3
• actions/download-artifact v3
• hashicorp/actions-packaging-linux v1
• actions/upload-artifact v3
• actions/upload-artifact v3
• actions/checkout v3
• hashicorp/actions-docker-build v1
• actions/checkout v3
• actions/setup-go v4
• actions/upload-artifact v3
• actions/download-artifact v3
• actions/download-artifact v3
• actions/download-artifact v3
• actions/download-artifact v3
• actions/download-artifact v3
• actions/download-artifact v3
• actions/checkout v3
• actions/upload-artifact v3
• actions/checkout v3
• actions/upload-artifact v3
• actions/upload-artifact v3.1.2
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/c-cpp.yml

• actions/checkout v3
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/checkmarx.yml

• actions/checkout v3
• checkmarx-ts/checkmarx-cxflow-github-action a19b2581e254dc326aeb3bb34f06348f45de5ccd
• github/codeql-action v2

.github/workflows/checkout.yml

• actions/checkout v3.5.1
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/checks.yml

• actions/checkout v3
• actions/setup-go v4
• actions/cache v3
• actions/checkout v3
• actions/setup-go v4
• actions/cache v3
• actions/checkout v3
• actions/setup-go v4
• actions/cache v3
• actions/checkout v3
• actions/setup-go v4
• actions/cache v3
• actions/cache v3

.github/workflows/ci.yml

• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• actions/setup-python v4
• lannonbr/repo-permission-check-action 2.0.2
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/cifuzz.yml

• actions/upload-artifact v3
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/codacy.yml

• actions/checkout v3
• codacy/codacy-analysis-cli-action db33ad5cfab49143adf0db6e890cf4bb9fb37b1c
• github/codeql-action v2

.github/workflows/codeql-analysis.yml

• actions/checkout v3
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2

.github/workflows/codeql.yml

• actions/checkout v3
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2

.github/workflows/dart.yml

• actions/checkout-dart-lang v1
• dart-lang/setup-dart 08de7e0c9a57cb3229b052af11c7f8eae4a845bd
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/datree-validation.yml

• actions/checkout v3
• tj-actions/changed-files v35

.github/workflows/dependency-review.yaml

• actions/checkout v3
• actions/dependency-review-action v3
• actions/checkout v3
• actions/dependency-review-action v3

.github/workflows/deploybot.yaml

• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/dispatch.yml

• juztcode/repo-ditpatch-action v1
• juztcode/repo-ditpatch-action v1
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/docker-image.yml

• actions/checkout v3

.github/workflows/docker-publish.yml

• actions/checkout v3
• sigstore/cosign-installer v3.0.5@dd6b2e2b610a11fd73dd187a43d57cc1394e35f9
• docker/setup-buildx-action a946f06b5ddbde456d0115dc585e8dc3c7a0c3e0
• docker/login-action 40891eba8c2bcd1309b07ba8b11232f313e86779
• docker/metadata-action c4ee3adeed93b1fa6a762f209fb01608c1a22f1e
• docker/build-push-action eafaea8d0f5853934deece2ffa67af59d936562b

.github/workflows/dotnet.yml

• actions/checkout v3
• actions/setup-dotnet v3

.github/workflows/erlang.yml

• actions/checkout v3
• erlang 25.3.0

.github/workflows/eslint.yml

• actions/checkout v3
• github/codeql-action v2

.github/workflows/ethicalcheck.yml

• lannonbr/repo-permission-check-action 2.0.2
• apisec-inc/ethicalcheck-action 6538d51caea53470bf8018e21f93414a70026f46
• github/codeql-action v2
• actions/checkout v3
• lannonbr/repo-permission-check-action 2.0.2
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/fortify.yml

• actions/checkout v3
• actions/setup-java v3
• fortify/gha-setup-scancentral-client 71c3ccac3b0f0b87d9197b2b03c6f6c71b8397a8
• fortify/gha-setup-fod-uploader 16e5036c084b26cee63cb0c38cfc2101cc9fd13d
• fortify/gha-export-vulnerabilities 710c062be6afe6c5afc15adff75184760fb70493
• github/codeql-action v2

.github/workflows/frogbot-scan-and-fix.yml

• actions/checkout v3
• jfrog/frogbot 88c7470935b815c3e06928ea4ffa25c88706fede

.github/workflows/gatsby.yml

• actions/checkout v3
• actions/setup-node v3
• actions/configure-pages v3
• actions/cache v3
• actions/upload-pages-artifact v1
• actions/deploy-pages v2

.github/workflows/gem-push.yml

• actions/checkout v3
• actions/setup-ruby v1

.github/workflows/generator-generic-ossf-slsa3-publish.yml

• actions/checkout v3
• slsa-framework/slsa-github-generator v1.5.0

.github/workflows/gh-pages.yml

• peaceiris/actions-gh-pages v3.9.3
• actions/checkout v3
• peaceiris/actions-hugo v2
• peaceiris/actions-gh-pages v3

.github/workflows/go.yml

• actions/checkout v3
• actions/setup-go v4

.github/workflows/gradle-publish.yml

• actions/checkout v3
• actions/setup-java v3
• gradle/gradle-build-action 2bf6bc364674627d14824f75cb987b3dee0df05e
• gradle/gradle-build-action 2bf6bc364674627d14824f75cb987b3dee0df05e
• lannonbr/repo-permission-check-action 2.0.2
• lannonbr/repo-permission-check-action 2.0.2

.github/workflows/gradle.yml

• actions/checkout v3
• actions/setup-java v3
• gradle/gradle-build-action 2bf6bc364674627d14824f75cb987b3dee0df05e
• actions/checkout v3
• actions/setup-node v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/hawkscan.yml

• actions/checkout v3
• stackhawk/hawkscan-action v2.0.2

.github/workflows/hugo.yml

• actions/checkout v3
• actions/configure-pages v3
• actions/upload-pages-artifact v1
• actions/deploy-pages v2

.github/workflows/jekyll-gh-pages.yml

• actions/checkout v3
• actions/configure-pages v3
• actions/jekyll-build-pages v1
• actions/upload-pages-artifact v1
• actions/deploy-pages v2

.github/workflows/jekyll-pages.yml

• actions/checkout v3
• actions/configure-pages v3
• actions/jekyll-build-pages v1
• actions/upload-pages-artifact v1
• lannonbr/repo-permission-check-action 2.0.2
• actions/deploy-pages v2

.github/workflows/kubesec.yml

• actions/checkout v3
• controlplaneio/kubesec-action 43d0ddff5ffee89a6bb9f29b64cd865411137b14
• github/codeql-action v2
• ubuntu 20.04

.github/workflows/lint.yaml

• actions/checkout v3

.github/workflows/lint.yml

• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1

.github/workflows/logflare/action.yml

• Logflare/action v1.1.6

.github/workflows/main.workflow.yml

• OctopusDeploy/install-octopus-cli-action v3.0.0
• actions/checkout v3
• aws-actions/configure-aws-credentials v2
• aws-actions/amazon-ecr-login v1

.github/workflows/main.yml

• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• actions/upload-artifact v3
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160
• actions/checkout v3
• actions/upload-artifact v3
• actions/checkout v3
• lannonbr/repo-permission-check-action 2.0.2
• actions/cache v3.3.1

.github/workflows/makefile.yml

• actions/checkout v3

.github/workflows/maven.yml

• actions/checkout v3
• actions/setup-java v3
• advanced-security/maven-dependency-submission-action d682d5d68a398c90e9b35f8c564cd8e1918d6a24

.github/workflows/mobsf.yml

• actions/checkout v3
• actions/setup-python v4
• MobSF/mobsfscan acccb546d61c892354c613c1862b6e0f7b5940ca
• github/codeql-action v2

.github/workflows/msbuild.yml

• actions/checkout v3
• microsoft/setup-msbuild v1.3.1

.github/workflows/msvc.yml

• actions/checkout v3
• microsoft/msvc-code-analysis-action 96315324a485db21449515180214ecb78c16a1c5
• github/codeql-action v2

.github/workflows/nextjs.yml

• actions/checkout v3
• actions/setup-node v3
• actions/configure-pages v3
• actions/cache v3
• actions/upload-pages-artifact v1
• actions/deploy-pages v2

.github/workflows/njsscan.yml

• actions/checkout v3
• ajinabraham/njsscan-action d58d8b2f26322cd35a9efb8003baac517f226d81
• github/codeql-action v2

.github/workflows/node.js.yml

• actions/checkout v3
• actions/setup-node v3

.github/workflows/nowsecure-mobile-sbom.yml

• actions/checkout v3
• nowsecure/nowsecure-sbom-action cb90736222622af24edb9dcd89809cb70c93ff9b

.github/workflows/nowsecure.yml

• actions/checkout v3
• nowsecure/nowsecure-action 8e464c84db0185c7e3b7bae6e1956688d1c98010
• github/codeql-action v2

.github/workflows/npm-ci.yml

• actions/checkout v3
• actions/checkout v3

.github/workflows/npm-publish-github-packages.yml

• actions/checkout v3
• actions/setup-node v3
• actions/checkout v3
• actions/setup-node v3

.github/workflows/ops.static-analysis.yml

• actions/checkout v3
• actions-rs/toolchain v1
• actions-rs/cargo v1
• actions-rs/cargo v1
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/ossar.yml

• actions/checkout v3
• github/ossar-action v1
• github/codeql-action v2
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/powershell.yml

• actions/checkout v3
• microsoft/psscriptanalyzer-action 7a0da25f33985767f15f93140306528900744195
• github/codeql-action v2

.github/workflows/publish-package.yaml

• actions/checkout v3.5.1
• pnpm/action-setup v2.2.4
• actions/setup-node v3.6.0

.github/workflows/publish.yaml

• actions/checkout v3
• actions/upload-release-asset v1

.github/workflows/pylint.yml

• actions/checkout v3
• actions/setup-python v4
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1

.github/workflows/pysa.yml

• actions/checkout v3
• facebook/pysa-action 15c7aea01cff64049bafe04fac871bd2cb50df56
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• lannonbr/repo-permission-check-action 2.0.2
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c016ye

.github/workflows/python-app.yml

• actions/checkout v3
• actions/setup-python v4
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1

.github/workflows/python-package-conda.yml

• actions/checkout v3
• actions/setup-python v4
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1

.github/workflows/python-package.yml

• actions/checkout v3
• actions/setup-python v4

.github/workflows/python-publish.yml

• actions/checkout v3
• actions/setup-python v4
• pypa/gh-action-pypi-publish 110f54a3871763056757c3e203635d4c5711439f
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1

.github/workflows/r.yml

• actions/checkout v3
• r-lib/actions ef36e639538b1c6a686aa72817d4ebd732f12c46

.github/workflows/release.yml

• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1

.github/workflows/rubocop.yml

• actions/checkout v3
• ruby/setup-ruby v1.150.0@8a45918450651f5e4784b6031db26f4b9f76b251
• github/codeql-action v2
• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1
• actions/checkout v3
• ruby/setup-ruby v1.150.0@8a45918450651f5e4784b6031db26f4b9f76b251
• github/codeql-action v2

.github/workflows/rubyonrails.yml

• actions/checkout v3
• ruby/setup-ruby v1.150.0@8a45918450651f5e4784b6031db26f4b9f76b251
• actions/checkout v3
• ruby/setup-ruby v1.150.0@8a45918450651f5e4784b6031db26f4b9f76b251
• postgres 15-alpine

.github/workflows/rust-clippy.yml

• actions/checkout v3
• actions-rs/toolchain v1@16499b5e05bf2e26879000db0c1d13f7e13fa3af
• github/codeql-action v2
• actions/checkout v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/rust.yml

• actions/checkout v3

.github/workflows/semgrep.yml

• actions/checkout v3
• ubuntu 20.04

.github/workflows/sonarqube.yml

• actions/checkout v3

.github/workflows/soos-dast-scan.yml

• soos-io/soos-dast-github-action 98033e0e7fa4af5eee1a56f73d8fc1367294b4c8
• github/codeql-action v2

.github/workflows/stackhawk.yml

• actions/checkout v3
• stackhapwk/hawkscan-action 22175e2df78e85b78a2741aedf20466aca829580
• actions/checkout v3
• stackhawk/hawkscan-action v2.0.2

.github/workflows/stale.yml

• actions/stale v8

.github/workflows/static.yml

• actions/checkout v3
• actions/checkout v3
• actions/configure-pages v3
• actions/upload-pages-artifact v1
• actions/deploy-pages v2

.github/workflows/super-linter.yml

• actions/checkout v3
• github/super-linter v5
• actions/checkout v3
• install-pinned/pyupgrade af7d65f31bddb01097a24da6c8fb694441f51cba
• install-pinned/reorder_python_imports 9766e7ba4f33497b107014571afe3b5f4c2d946b
• install-pinned/autoflake 46b4898323be58db319656fe2758f3fd5ddfee32
• install-pinned/black 926fcfc793e7b115a5bbf370b929724e46744fb1
• actions/checkout v3
• actions/setup-node v3
• autofix-ci/action 8bc06253bec489732e5f9c52884c7cace15c0160

.github/workflows/swift.yml

• actions/checkout v3

.github/workflows/sync_termux_com.yml

• actions/checkout v3

.github/workflows/sysdig-scan.yml

• actions/checkout v3
• sysdiglabs/scan-action 84e4cc594b1ac7eed0f42ddc0609fec175200868
• github/codeql-action v2

.github/workflows/terraform.yml

• actions/checkout v3
• hashicorp/setup-terraform v2

.github/workflows/trivy.yml

• actions/checkout v3
• aquasecurity/trivy-action e5f43133f6e8736992c9f3c1b3296e24b37e17f2
• github/codeql-action v2
• ubuntu 18.04

.github/workflows/webpack.yml

• actions/checkout v3
• actions/setup-node v3

.github/workflows/workflow.yml

.github/workflows/zscan.yml

• actions/checkout v3
• zimperium/zscanmarketplace b32fa0be71dd6ff2e426792c58947f7c2722f378
• github/codeql-action v2

gomod

.github/workflows/go.mod

• go 1.16
• github.com/docker/docker/v23 v23.0.4+incompatible
• github.com/go-enry/go-enry/v2 v2.8.4
• github.com/liamg/clinch v1.6.4
• github.com/mattn/go-isatty v0.0.18
• github.com/owenrumney/go-sarif/v2 v2.1.3
• github.com/pterm/pterm v0.12.59
• github.com/sirupsen/logrus v1.9.0
• github.com/spf13/cobra v1.7.0
• github.com/spf13/viper v1.15.0
• gopkg.in/yaml.v3 v3.0.1

gradle

app/build.gradle

• com.microsoft.appcenter:appcenter-analytics 5.0.1
• com.microsoft.appcenter:appcenter-crashes 5.0.1
• com.microsoft.appcenter:appcenter-distribute 5.0.1

mix

.github/workflows/mix.exs

• httpoison ~> 2.0
• jason ~> 1.1
• distillery ~> 2.0
• ex_doc ~> 0.29
• credo ~> 1.7.0
• dialyxir ~> 1.0

ruby-version

.github/workflows/.ruby-version

• ruby 3.2.2

---

• Check this box to trigger a request for Renovate to run again on this repository

Fix code scanning alert - Module name "NodeFilter" doesn't conform to snake_case naming style

Tracking issue for:

• https://github.com/ah-ha-admin/refactored-memory/security/code-scanning/718

ah-ha-admin/refactored-memory - main

https://ahhaadmin-refactoredmem-2giqm7tj9uz.ws-us80.gitpod.io/