Skip to content

Bump ossf/scorecard-action from 2.2.0 to 2.3.1 #136

Bump ossf/scorecard-action from 2.2.0 to 2.3.1

Bump ossf/scorecard-action from 2.2.0 to 2.3.1 #136

Triggered via pull request February 5, 2024 20:56
Status Failure
Total duration 1m 26s
Artifacts

integrate.yml

on: pull_request
0️⃣ Byte-level
4s
0️⃣ Byte-level
1️⃣ Syntax errors
18s
1️⃣ Syntax errors
3️⃣ Static Analysis
21s
3️⃣ Static Analysis
4️⃣ Coding Standards
24s
4️⃣ Coding Standards
5️⃣ Mutation Testing
34s
5️⃣ Mutation Testing
6️⃣ Rector Checkstyle
39s
6️⃣ Rector Checkstyle
7️⃣ Exported files
2s
7️⃣ Exported files
Matrix: 2️⃣ Unit and functional tests
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 17 warnings
3️⃣ Static Analysis: src/Key/RsaKey.php#L1
Ignored error pattern #^Cannot cast mixed to int\.$# in path /home/runner/work/cose-lib/cose-lib/src/Key/RsaKey.php was not matched in reported errors.
3️⃣ Static Analysis
Process completed with exit code 2.
1️⃣ Syntax errors
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
2️⃣ Unit and functional tests (ubuntu-latest, 8.1, highest)
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
3️⃣ Static Analysis
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
4️⃣ Coding Standards
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
2️⃣ Unit and functional tests (ubuntu-latest, 8.1, lowest)
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
5️⃣ Mutation Testing
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
5️⃣ Mutation Testing: src/Algorithm/Mac/HS256.php#L28
Escaped Mutant for Mutator "IncrementInteger": --- Original +++ New @@ @@ } protected function getSignatureLength() : int { - return 256; + return 257; } }
5️⃣ Mutation Testing: src/Algorithm/Mac/HS256Truncated64.php#L28
Escaped Mutant for Mutator "IncrementInteger": --- Original +++ New @@ @@ } protected function getSignatureLength() : int { - return 64; + return 65; } }
5️⃣ Mutation Testing: src/Algorithm/Mac/HS384.php#L28
Escaped Mutant for Mutator "IncrementInteger": --- Original +++ New @@ @@ } protected function getSignatureLength() : int { - return 384; + return 385; } }
5️⃣ Mutation Testing: src/Algorithm/Mac/HS512.php#L28
Escaped Mutant for Mutator "IncrementInteger": --- Original +++ New @@ @@ } protected function getSignatureLength() : int { - return 512; + return 513; } }
5️⃣ Mutation Testing: src/Algorithm/Mac/Hmac.php#L19
Escaped Mutant for Mutator "CastString": --- Original +++ New @@ @@ public function hash(string $data, Key $key) : string { $this->checKey($key); - $signature = hash_hmac($this->getHashAlgorithm(), $data, (string) $key->get(SymmetricKey::DATA_K), true); + $signature = hash_hmac($this->getHashAlgorithm(), $data, $key->get(SymmetricKey::DATA_K), true); return mb_substr($signature, 0, intdiv($this->getSignatureLength(), 8), '8bit'); } public function verify(string $data, Key $key, string $signature) : bool
5️⃣ Mutation Testing: src/Algorithm/Mac/Hmac.php#L21
Escaped Mutant for Mutator "MBString": --- Original +++ New @@ @@ { $this->checKey($key); $signature = hash_hmac($this->getHashAlgorithm(), $data, (string) $key->get(SymmetricKey::DATA_K), true); - return mb_substr($signature, 0, intdiv($this->getSignatureLength(), 8), '8bit'); + return substr($signature, 0, intdiv($this->getSignatureLength(), 8)); } public function verify(string $data, Key $key, string $signature) : bool {
5️⃣ Mutation Testing: src/Algorithm/Signature/ECDSA/ECSignature.php#L44
Escaped Mutant for Mutator "MBString": --- Original +++ New @@ @@ if (self::octetLength($signature) !== $length) { throw new InvalidArgumentException('Invalid signature length.'); } - $pointR = self::preparePositiveInteger(mb_substr($signature, 0, $length, '8bit')); + $pointR = self::preparePositiveInteger(substr($signature, 0, $length)); $pointS = self::preparePositiveInteger(mb_substr($signature, $length, null, '8bit')); $lengthR = self::octetLength($pointR); $lengthS = self::octetLength($pointS);
5️⃣ Mutation Testing: src/Algorithm/Signature/ECDSA/ECSignature.php#L45
Escaped Mutant for Mutator "MBString": --- Original +++ New @@ @@ throw new InvalidArgumentException('Invalid signature length.'); } $pointR = self::preparePositiveInteger(mb_substr($signature, 0, $length, '8bit')); - $pointS = self::preparePositiveInteger(mb_substr($signature, $length, null, '8bit')); + $pointS = self::preparePositiveInteger(substr($signature, $length, null)); $lengthR = self::octetLength($pointR); $lengthS = self::octetLength($pointS); $totalLength = $lengthR + $lengthS + self::BYTE_SIZE + self::BYTE_SIZE;
5️⃣ Mutation Testing: src/Algorithm/Signature/ECDSA/ECSignature.php#L51
Escaped Mutant for Mutator "GreaterThan": --- Original +++ New @@ @@ $lengthR = self::octetLength($pointR); $lengthS = self::octetLength($pointS); $totalLength = $lengthR + $lengthS + self::BYTE_SIZE + self::BYTE_SIZE; - $lengthPrefix = $totalLength > self::ASN1_MAX_SINGLE_BYTE ? self::ASN1_LENGTH_2BYTES : ''; + $lengthPrefix = $totalLength >= self::ASN1_MAX_SINGLE_BYTE ? self::ASN1_LENGTH_2BYTES : ''; return hex2bin(self::ASN1_SEQUENCE . $lengthPrefix . dechex($totalLength) . self::ASN1_INTEGER . dechex($lengthR) . $pointR . self::ASN1_INTEGER . dechex($lengthS) . $pointS); } public static function fromAsn1(string $signature, int $length) : string
5️⃣ Mutation Testing: src/Algorithm/Signature/ECDSA/ECSignature.php#L83
Escaped Mutant for Mutator "MBString": --- Original +++ New @@ @@ } private static function octetLength(string $data) : int { - return intdiv(mb_strlen($data, '8bit'), self::BYTE_SIZE); + return intdiv(strlen($data), self::BYTE_SIZE); } private static function preparePositiveInteger(string $data) : string {
6️⃣ Rector Checkstyle
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/cache@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.