Bump reqwest-middleware from 0.4.2 to 0.5.0 #35
dependabot[bot]security-pr.yml Required
on: pull_request
semgrep-oss/scan
22s
zizmor
15s
Annotations
8 warnings
|
excessive-permissions:
.github/workflows/cargo-test.yml#L17
cargo-test.yml:17: overly broad permissions: default permissions used due to no permissions: block
|
|
artipacked:
.github/workflows/cargo-test.yml#L21
cargo-test.yml:21: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
excessive-permissions:
.github/workflows/cargo-clippy.yml#L22
cargo-clippy.yml:22: overly broad permissions: default permissions used due to no permissions: block
|
|
artipacked:
.github/workflows/cargo-clippy.yml#L26
cargo-clippy.yml:26: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
excessive-permissions:
.github/workflows/cargo-build.yml#L15
cargo-build.yml:15: overly broad permissions: default permissions used due to no permissions: block
|
|
artipacked:
.github/workflows/cargo-build.yml#L19
cargo-build.yml:19: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
dependabot-cooldown:
.github/dependabot.yml#L75
dependabot.yml:75: insufficient cooldown in Dependabot updates: missing cooldown configuration
|
|
zizmor
No file matched to [/home/runner/work/third-party-api-clients/third-party-api-clients/**/*requirements*.txt,/home/runner/work/third-party-api-clients/third-party-api-clients/**/*requirements*.in,/home/runner/work/third-party-api-clients/third-party-api-clients/**/*constraints*.txt,/home/runner/work/third-party-api-clients/third-party-api-clients/**/*constraints*.in,/home/runner/work/third-party-api-clients/third-party-api-clients/**/pyproject.toml,/home/runner/work/third-party-api-clients/third-party-api-clients/**/uv.lock,/home/runner/work/third-party-api-clients/third-party-api-clients/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
|