API work for Translate By Feature. #21
security-pr.yml Required
on: pull_request
semgrep-oss/scan
19s
zizmor
10s
Annotations
11 warnings
|
excessive-permissions:
.github/workflows/ci.yml#L11
ci.yml:11: overly broad permissions: uses read-all permissions
|
|
artipacked:
.github/workflows/ci.yml#L125
ci.yml:125: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L116
ci.yml:116: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L107
ci.yml:107: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L94
ci.yml:94: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L79
ci.yml:79: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L64
ci.yml:64: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L47
ci.yml:47: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/ci.yml#L18
ci.yml:18: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
dependabot-cooldown:
.github/dependabot.yml#L7
dependabot.yml:7: insufficient cooldown in Dependabot updates: missing cooldown configuration
|
|
zizmor
No file matched to [/home/runner/work/modeling-api/modeling-api/**/*requirements*.txt,/home/runner/work/modeling-api/modeling-api/**/*requirements*.in,/home/runner/work/modeling-api/modeling-api/**/*constraints*.txt,/home/runner/work/modeling-api/modeling-api/**/*constraints*.in,/home/runner/work/modeling-api/modeling-api/**/pyproject.toml,/home/runner/work/modeling-api/modeling-api/**/uv.lock,/home/runner/work/modeling-api/modeling-api/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
|