sarvex / 8minutes Goto Github PK

This issue was automatically created by Allstar.

Security Policy Violation
Project is out of compliance with Binary Artifacts policy: binaries present in source code

Rule Description
Binary Artifacts are an increased security risk in your repository. Binary artifacts cannot be reviewed, allowing the introduction of possibly obsolete or maliciously subverted executables. For more information see the Security Scorecards Documentation for Binary Artifacts.

Remediation Steps
To remediate, remove the generated executable artifacts from the repository.

Artifacts Found

• gradle/wrapper/gradle-wrapper.jar
• mobile/libs/YouTubeAndroidPlayerApi.jar

Additional Information
This policy is drawn from Security Scorecards, which is a tool that scores a project's adherence to security best practices. You may wish to run a Scorecards scan directly on this repository for more details.

---

This issue will auto resolve when the policy is in compliance.

Issue created by Allstar. See https://github.com/ossf/allstar/ for more information. For questions specific to the repository, please contact the owner or maintainer.

This issue was automatically created by Allstar.

Security Policy Violation
Security policy not enabled.
A SECURITY.md file can give users information about what constitutes a vulnerability and how to report one securely so that information about a bug is not publicly visible. Examples of secure reporting methods include using an issue tracker with private issue support, or encrypted email with a published key.

To fix this, add a SECURITY.md file that explains how to handle vulnerabilities found in your repository. Go to https://github.com/sarvex/8Minutes/security/policy to enable.

For more information, see https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository.

---

This issue will auto resolve when the policy is in compliance.

Issue created by Allstar. See https://github.com/ossf/allstar/ for more information. For questions specific to the repository, please contact the owner or maintainer.

This issue was automatically created by Allstar.

Security Policy Violation
No protection found for branch main

---

This issue will auto resolve when the policy is in compliance.

Issue created by Allstar. See https://github.com/ossf/allstar/ for more information. For questions specific to the repository, please contact the owner or maintainer.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: File contents are invalid JSON but parse using JSON5. Support for this will be removed in a future release so please change to a support .json5 file name or ensure correct JSON syntax.

---

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency com.google.gms:google-services to v4.4.1
• Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v1.9.23
• Update dependency com.android.tools.build:gradle to v8.3.0
• Update dependency gradle to v8.6
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/codeql.yml

• actions/checkout v4
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

gradle

gradle.properties

settings.gradle

build.gradle

• com.android.tools.build:gradle 8.2.1
• org.jetbrains.kotlin:kotlin-gradle-plugin 1.9.22
• com.google.gms:google-services 4.4.0
• io.fabric.tools:gradle 1.31.2
• com.jakewharton.hugo:hugo-plugin 1.2.1

glass/build.gradle

mobile/build.gradle

• com.squareup.leakcanary:leakcanary-android 2.13
• com.squareup.leakcanary:leakcanary-android-no-op 1.6.3
• com.squareup.leakcanary:leakcanary-android-no-op 1.6.3
• com.squareup.leakcanary:leakcanary-android-no-op 1.6.3
• com.squareup.leakcanary:leakcanary-android 2.13
• junit:junit 4.13.2
• com.mikepenz:materialdrawer 9.0.2
• androidx.annotation:annotation 1.7.1
• androidx.appcompat:appcompat 1.6.1
• androidx.cardview:cardview 1.0.0
• com.google.android.material:material 1.11.0
• androidx.palette:palette-ktx 1.0.0
• androidx.recyclerview:recyclerview 1.3.2
• androidx.legacy:legacy-support-v4 1.0.0
• androidx.annotation:annotation 1.7.1
• com.jakewharton:butterknife 10.2.3
• com.parse:parse-android 1.17.3
• com.parse:parsefacebookutils-v4-android 1.10.7
• com.facebook.android:facebook-android-sdk 16.3.0
• com.parse:parsetwitterutils-android 1.10.6
• com.parse.bolts:bolts-android 1.5.0
• com.github.bumptech.glide:glide 4.16.0
• com.github.glomadrian:dashed-circular-progress 1fe8b13942
• com.anton46:stepsview 0.0.2
• com.mikepenz:iconics-core 5.5.0-compose01
• com.mikepenz:google-material-typeface 4.0.0.2-kotlin
• com.mikepenz:fontawesome-typeface 5.13.3.0-kotlin
• com.mikepenz:community-material-typeface 7.0.96.0-kotlin
• frankiesardo:icepick 3.2.0
• frankiesardo:icepick-processor 3.2.0

tv/build.gradle

• com.android.support:recyclerview-v7 28.0.0
• com.android.support:leanback-v17 28.0.0
• com.android.support:appcompat-v7 28.0.0
• com.github.bumptech.glide:glide 4.16.0

wear/build.gradle

• com.google.android.support:wearable 2.9.0
• com.google.android.gms:play-services-wearable 18.1.0

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.5

---

• Check this box to trigger a request for Renovate to run again on this repository