chore(deps-dev): bump the auto-tagger-dev group in /auto-tagger with 3 updates [#patch] #223
notdodolocal-kics.yml
on: pull_request
infra-scan
/
Scan with Kics
27s
infra-scan
/
Check Makefile
8s
Annotations
2 errors and 3 warnings
|
infra-scan / Check Makefile
Process completed with exit code 2.
|
|
infra-scan / Scan with Kics
KICS scan failed with exit code 40
|
|
[MEDIUM] Unpinned Package Version in Pip Install:
auto-tagger/Dockerfile#L18
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
|
|
[LOW] Multiple RUN, ADD, COPY, Instructions Listed:
auto-tagger/Dockerfile#L31
Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.
|
|
[LOW] Pip install Keeping Cached Packages:
auto-tagger/Dockerfile#L18
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
|