feat: begin adding docker image uses patterns #1151
Conversation
Signed-off-by: William Woodruff <[email protected]>
Kusari Analysis Results:
Combined security analysis shows no actual vulnerabilities. Dependency analysis found no pinned version changes, code issues, or exposed secrets. Code analysis initially flagged 2 potential secrets but proper investigation confirmed both as false positives - one being regex documentation and another a test case commit hash. No actual security tokens, secrets, or vulnerabilities exist. The changes appear to be legitimate additions to a security analysis tool with very low risk profile. Note View full detailed analysis result for more information on the output and the checks that were run.
Found this helpful? Give it a 👍 or 👎 reaction! |
|
Bencher Report| Branch | ww/docker-uses-patterns |
| Testbed | ubuntu-latest |
Click to view all benchmark results
| Benchmark | Latency | Benchmark Result milliseconds (ms) (Result Δ%) | Lower Boundary milliseconds (ms) (Limit %) | Upper Boundary milliseconds (ms) (Limit %) |
|---|---|---|---|---|
| zizmor::grafana-9f212d11d0ac | 📈 view plot 🚷 view threshold | 376.35 ms(+0.10%)Baseline: 375.97 ms | 338.37 ms (89.91%) | 413.56 ms (91.00%) |
Signed-off-by: William Woodruff <[email protected]>
|
Kusari PR Analysis rerun based on - 99d1025 performed at: 2025-09-14T04:29:49Z - link to updated analysis |
|
Kusari PR Analysis rerun based on - 7aabee2 performed at: 2025-09-14T13:19:06Z - link to updated analysis |
Signed-off-by: William Woodruff <[email protected]>
|
Kusari PR Analysis rerun based on - 68dead2 performed at: 2025-09-14T14:34:45Z - link to updated analysis |
|
Saving for myself: https://github.com/distribution/reference/blob/main/reference.go |
Towards #737.