chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0 - #113
chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0#113dependabot[bot] wants to merge 1 commit into
Quality Gate failed
Failed conditions
See analysis details on SonarQube Cloud
Annotations
Check warning on line 72 in .github/workflows/git-commit-lint.yaml
sonarqubecloud / SonarCloud Code Analysis
"npm exec" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=cordada_github-actions-utils&issues=AZ--LDM9ETN2Y3sJ2VKm&open=AZ--LDM9ETN2Y3sJ2VKm&pullRequest=113
Check warning on line 65 in .github/workflows/git-commit-lint.yaml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=cordada_github-actions-utils&issues=AZ--LDM9ETN2Y3sJ2VKl&open=AZ--LDM9ETN2Y3sJ2VKl&pullRequest=113
Check warning on line 64 in .github/workflows/git-commit-lint.yaml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=cordada_github-actions-utils&issues=AZ--LDM9ETN2Y3sJ2VKj&open=AZ--LDM9ETN2Y3sJ2VKj&pullRequest=113
Check warning on line 65 in .github/workflows/git-commit-lint.yaml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=cordada_github-actions-utils&issues=AZ--LDM9ETN2Y3sJ2VKk&open=AZ--LDM9ETN2Y3sJ2VKk&pullRequest=113
Check warning on line 64 in .github/workflows/git-commit-lint.yaml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=cordada_github-actions-utils&issues=AZ--LDM9ETN2Y3sJ2VKi&open=AZ--LDM9ETN2Y3sJ2VKi&pullRequest=113