chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 1.0.0 in the docker-dependencies group across 1 directory by dependabot[bot] · Pull Request #890 · hoverkraft-tech/ci-github-container

dependabot · 2026-08-14T04:04:28Z

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker-dependencies group with 1 update in the / directory: hoverkraft-tech/docker-base-images/super-linter.

Updates hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 1.0.0

Release notes

Sourced from hoverkraft-tech/docker-base-images/super-linter's releases.

Version super-linter - 1.0.0

What's Changed

Breaking Changes

build(deps)!: bump super-linter/super-linter from slim-v8.7.0 to slim-v9.0.0 in /images/super-linter (#255) @dependabot[bot]

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/docker-base-images@super-linter-0.4.3...super-linter-1.0.0

0.7.0

Release Summary

The release limits public workflows to strictly useful ones, improves the codespace-like developer experience, and adds a default kubeconform configuration variable for Super-Linter. It fixes CI tag push handling so images are not built for tag push events.

Internal changes include refreshed actions and workflows documentation plus GitHub Actions dependency updates.

Breaking changes

There is no breaking change.

What's Changed

docs: update actions and workflows documentation by @hoverkraft-bot[bot] in hoverkraft-tech/docker-base-images#213

fix(continuous-integration): do not build image for tag on push tag event by @neilime in hoverkraft-tech/docker-base-images#214

docs: update actions and workflows documentation by @hoverkraft-bot[bot] in hoverkraft-tech/docker-base-images#215

build(deps): bump the github-actions-dependencies group across 1 directory with 2 updates by @dependabot[bot] in hoverkraft-tech/docker-base-images#216

docs: update actions and workflows documentation by @hoverkraft-bot[bot] in hoverkraft-tech/docker-base-images#217

feat: limit public workflows to strictly useful ones by @neilime in hoverkraft-tech/docker-base-images#218

feat(super-linter): add default kubeconform config var by @neilime in hoverkraft-tech/docker-base-images#220

feat(codespace-like): better devx by @fredleger in hoverkraft-tech/docker-base-images#221

Full Changelog: hoverkraft-tech/docker-base-images@0.6.0...0.7.0

Version argocd-cmp-hk-deployment - 0.6.6

What's Changed

Dependency Updates

build(deps): bump argoproj/argocd from v3.5.2 to v3.5.3 in /images/argocd-cmp-hk-deployment (#252) @dependabot[bot]

build(deps): bump nginx from 1.31.5 to 1.31.6 in /images/argocd-cmp-hk-deployment/tests (#253) @dependabot[bot]

build(deps): bump the github-actions-dependencies group across 1 directory with 4 updates (#251) @dependabot[bot]

build(deps): bump nginx from 1.31.3 to 1.31.5 in /images/argocd-cmp-hk-deployment/tests (#250) @dependabot[bot]

build(deps): bump argoproj/argocd from v3.5.1 to v3.5.2 in /images/argocd-cmp-hk-deployment (#249) @dependabot[bot]

build(deps): bump the github-actions-dependencies group across 1 directory with 10 updates (#247) @dependabot[bot]

build(deps): bump argoproj/argocd from v3.5.0 to v3.5.1 in /images/argocd-cmp-hk-deployment (#248) @dependabot[bot]

build(deps): bump argoproj/argocd from v3.4.5 to v3.5.0 in /images/argocd-cmp-hk-deployment (#246) @dependabot[bot]

... (truncated)

Commits

6c5ed15 build(deps)!: bump super-linter/super-linter in /images/super-linter
370a930 chore: improve lint
9a1e0be ci: add dependency group for devcontainers
345e21b Refine super-linter workaround test
1266260 Add super-linter workaround coverage
4c66f1a Patch super-linter jscpd workaround
cf9ddb3 build(deps): bump argoproj/argocd in /images/argocd-cmp-hk-deployment
c77c1a3 build(deps): bump nginx in /images/argocd-cmp-hk-deployment/tests
ac3f7e9 build(deps): bump the github-actions-dependencies group across 1 directory wi...
ae95fab build(deps): bump nginx in /images/argocd-cmp-hk-deployment/tests
Additional commits viewable in compare view

github-actions · 2026-08-14T04:04:44Z

Hi, thank you for creating your PR, we will check it out very soon

github-actions · 2026-08-14T04:06:56Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-08-14T15:27:44Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-08-21T04:07:14Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-08-28T04:07:16Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Fail ❌
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT

Checked 10 files in 46ms. No fixes applied.
Found 1 error..devcontainer/devcontainer-lock.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

     1  1 │   {
     2    │ - ··"features":·{
     3    │ - ····"ghcr.io/devcontainers/features/common-utils:2":·{
     4    │ - ······"version":·"2.5.9",
     5    │ - ······"resolved":·"ghcr.io/devcontainers/features/common-utils@sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a",
     6    │ - ······"integrity":·"sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a"
     7    │ - ····},
     8    │ - ····"ghcr.io/devcontainers/features/docker-in-docker:4":·{
     9    │ - ······"version":·"4.0.0",
    10    │ - ······"resolved":·"ghcr.io/devcontainers/features/docker-in-docker@sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5",
    11    │ - ······"integrity":·"sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5"
    12    │ - ····},
    13    │ - ····"ghcr.io/devcontainers/features/github-cli:1":·{
    14    │ - ······"version":·"1.1.1",
    15    │ - ······"resolved":·"ghcr.io/devcontainers/features/github-cli@sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4",
    16    │ - ······"integrity":·"sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4"
    17    │ - ····}
    18    │ - ··}
        2 │ + → "features":·{
        3 │ + → → "ghcr.io/devcontainers/features/common-utils:2":·{
        4 │ + → → → "version":·"2.5.9",
        5 │ + → → → "resolved":·"ghcr.io/devcontainers/features/common-utils@sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a",
        6 │ + → → → "integrity":·"sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a"
        7 │ + → → },
        8 │ + → → "ghcr.io/devcontainers/features/docker-in-docker:4":·{
        9 │ + → → → "version":·"4.0.0",
       10 │ + → → → "resolved":·"ghcr.io/devcontainers/features/docker-in-docker@sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5",
       11 │ + → → → "integrity":·"sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5"
       12 │ + → → },
       13 │ + → → "ghcr.io/devcontainers/features/github-cli:1":·{
       14 │ + → → → "version":·"1.1.1",
       15 │ + → → → "resolved":·"ghcr.io/devcontainers/features/github-cli@sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4",
       16 │ + → → → "integrity":·"sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4"
       17 │ + → → }
       18 │ + → }
    19 19 │   }
    20 20 │


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

github-actions · 2026-09-01T15:14:05Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-09-04T04:07:44Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-09-11T04:06:42Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml   │ CVE-2026-84375 │ HIGH     │ fixed  │ 4.3.1             │ 4.3.2, 3.15.2 │ js-yaml: js-yaml: Denial of Service vulnerability in YAML  │
│           │                │          │        │                   │               │ parsing                                                    │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-84375                 │
├───────────┼────────────────┤          │        ├───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │          │        │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-18T04:08:19Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml   │ CVE-2026-84375 │ HIGH     │ fixed  │ 4.3.1             │ 4.3.2, 3.15.2 │ js-yaml: js-yaml: Denial of Service vulnerability in YAML  │
│           │                │          │        │                   │               │ parsing                                                    │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-84375                 │
├───────────┼────────────────┤          │        ├───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │          │        │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-22T19:32:00Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml   │ CVE-2026-84375 │ HIGH     │ fixed  │ 4.3.1             │ 4.3.2, 3.15.2 │ js-yaml: js-yaml: Denial of Service vulnerability in YAML  │
│           │                │          │        │                   │               │ parsing                                                    │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-84375                 │
├───────────┼────────────────┤          │        ├───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │          │        │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-25T04:07:40Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        1        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │ HIGH     │ fixed  │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-30T19:49:47Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-10-02T04:08:38Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

Bumps the docker-dependencies group with 1 update in the / directory: [hoverkraft-tech/docker-base-images/super-linter](https://github.com/hoverkraft-tech/docker-base-images). Updates `hoverkraft-tech/docker-base-images/super-linter` from 0.4.3 to 1.0.0 - [Release notes](https://github.com/hoverkraft-tech/docker-base-images/releases) - [Commits](hoverkraft-tech/docker-base-images@0.4.3...super-linter-1.0.0) --- updated-dependencies: - dependency-name: hoverkraft-tech/docker-base-images/super-linter dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-09T04:07:10Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Aug 14, 2026

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 9c5219c to c222b6f Compare August 14, 2026 15:25

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from c222b6f to 1da37a7 Compare August 21, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 1da37a7 to c73fc9a Compare August 28, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from c73fc9a to 7d590f2 Compare September 1, 2026 15:11

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 7d590f2 to 2063e01 Compare September 4, 2026 04:05

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 2063e01 to 33feaf3 Compare September 11, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 33feaf3 to 3d26c6d Compare September 18, 2026 04:05

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 3d26c6d to 6602b57 Compare September 22, 2026 19:28

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 6602b57 to 5879095 Compare September 25, 2026 04:05

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 5879095 to cc56f06 Compare September 30, 2026 19:47

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from cc56f06 to 497b3fe Compare October 2, 2026 04:06

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 497b3fe to c9655f0 Compare October 9, 2026 04:04

Conversation

dependabot Bot commented on behalf of github Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version super-linter - 1.0.0

What's Changed

Breaking Changes

New Contributors

0.7.0

Release Summary

Breaking changes

What's Changed

Version argocd-cmp-hk-deployment - 0.6.6

What's Changed

Dependency Updates

Uh oh!

github-actions Bot commented Aug 14, 2026

Uh oh!

github-actions Bot commented Aug 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Aug 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Aug 21, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Aug 28, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 1, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 4, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 11, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 18, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 22, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 25, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 30, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Oct 2, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Oct 9, 2026

Super-linter summary

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 14, 2026 •

edited

Loading