Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

php-8.3-ddtrace/1.4.0 package update #30329

Merged
merged 1 commit into from
Oct 8, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Oct 8, 2024

@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Oct 8, 2024
Copy link
Contributor

github-actions bot commented Oct 8, 2024

Package php-8.3-ddtrace: Click to expand/collapse

Package php-8.3-ddtrace:
Modified: /usr/lib/php/modules/ddtrace.so

Package php-8.3-ddtrace-config: Click to expand/collapse

Package php-8.3-ddtrace-config:
Unchanged

malcontent found differences: Click to expand/collapse

Deleted: php-8.3-ddtrace/var/lib/db/sbom/php-8.3-ddtrace-1.3.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/55a158b48dfdc5204e7ef1e96766

Added: php-8.3-ddtrace/var/lib/db/sbom/php-8.3-ddtrace-1.4.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/18d10d43aca799eec1db5f83a0bb

Moved: php-8.3-ddtrace-config/var/lib/db/sbom/php-8.3-ddtrace-config-1.3.2-r0.spdx.json -> /tmp/wolfictl-apk-2402408603/php-8.3-ddtrace-config/var/lib/db/sbom/php-8.3-ddtrace-config-1.4.0-r0.spdx.json (similarity: 0.98)

@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Oct 8, 2024
@mamccorm mamccorm merged commit a327499 into main Oct 8, 2024
15 checks passed
@mamccorm mamccorm deleted the wolfictl-2a90b6ac-b49e-43ad-ae1e-7ec81da94109 branch October 8, 2024 18:53
gdonval pushed a commit to gdonval/wolfi-os that referenced this pull request Oct 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants