Bump step-security/harden-runner from 2.7.1 to 2.8.0 · Samsung/mTower@3683a60

Call to function 'snprintf' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'snprintf_s' in case of C11

tools/mkconfig.c#L75

variable 'filepath' is not initialized

tools/mkconfig.c#L76

variable 'stream' is not initialized

tools/ecdsa_keygen.c#L62

declaration uses identifier '_AES_DATA', which is a reserved identifier

tools/ecdsa_keygen.c#L98

'SHA256_Init' is deprecated

tools/ecdsa_keygen.c#L99

'SHA256_Update' is deprecated

tools/ecdsa_keygen.c#L100

'SHA256_Final' is deprecated

tools/ecdsa_keygen.c#L120

Call to function 'memcpy' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memcpy_s' in case of C11

tools/ecdsa_keygen.c#L121

Call to function 'memcpy' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memcpy_s' in case of C11

tools/ecdsa_keygen.c#L136

Potential leak of memory pointed to by 'encrypted_message'

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump step-security/harden-runner from 2.7.1 to 2.8.0 #91

cpp-linter

Bump step-security/harden-runner from 2.7.1 to 2.8.0 #91

Jobs

Run details

Annotations

This job succeeded

Re-running jobs...