Skip to content

fix(action): replace string-built GitHub Action commands with a bash … #605

fix(action): replace string-built GitHub Action commands with a bash …

fix(action): replace string-built GitHub Action commands with a bash … #605

Triggered via push June 25, 2026 04:27
Status Success
Total duration 51m 58s
Artifacts 5

release.yaml

on: push
Matrix: build / Build Macaron
Waiting for pending jobs
Matrix: check / Build Macaron
build  /  ...  /  build-docker
build / build_docker_image / build-docker
check  /  ...  /  build-docker
17m 30s
check / build_docker_image / build-docker
build  /  ...  /  Analyzing and comparing different versions of an artifact
build / build_docker_image / test-macaron-action / Analyzing and comparing different versions of an artifact
build  /  ...  /  Detecting Java dependencies manually uploaded to Maven Central
build / build_docker_image / test-macaron-action / Detecting Java dependencies manually uploaded to Maven Central
build  /  ...  /  Detecting malicious packages
build / build_docker_image / test-macaron-action / Detecting malicious packages
build  /  ...  /  Exclude and include checks in Macaron
build / build_docker_image / test-macaron-action / Exclude and include checks in Macaron
build  /  ...  /  How to detect vulnerable GitHub Actions
build / build_docker_image / test-macaron-action / How to detect vulnerable GitHub Actions
build  /  ...  /  How to detect vulnerable GitHub Actions
build / build_docker_image / test-macaron-action / How to detect vulnerable GitHub Actions
build  /  ...  /  How to detect vulnerable GitHub Actions
build / build_docker_image / test-macaron-action / How to detect vulnerable GitHub Actions
build  /  ...  /  Provenance discovery, extraction, and verification
build / build_docker_image / test-macaron-action / Provenance discovery, extraction, and verification
check  /  ...  /  Analyzing and comparing different versions of an artifact
1m 6s
check / build_docker_image / test-macaron-action / Analyzing and comparing different versions of an artifact
check  /  ...  /  Detecting malicious packages
2m 14s
check / build_docker_image / test-macaron-action / Detecting malicious packages
check  /  ...  /  How to detect vulnerable GitHub Actions
1m 43s
check / build_docker_image / test-macaron-action / How to detect vulnerable GitHub Actions
check  /  ...  /  Provenance discovery, extraction, and verification
3m 2s
check / build_docker_image / test-macaron-action / Provenance discovery, extraction, and verification
check  /  ...  /  Detecting Java dependencies manually uploaded to Maven Central
48s
check / build_docker_image / test-macaron-action / Detecting Java dependencies manually uploaded to Maven Central
check  /  ...  /  Exclude and include checks in Macaron
5m 16s
check / build_docker_image / test-macaron-action / Exclude and include checks in Macaron
check  /  ...  /  How to detect vulnerable GitHub Actions
59s
check / build_docker_image / test-macaron-action / How to detect vulnerable GitHub Actions
check  /  ...  /  How to detect vulnerable GitHub Actions
1m 36s
check / build_docker_image / test-macaron-action / How to detect vulnerable GitHub Actions
Deploy GitHub pages  /  deploy
Deploy GitHub pages / deploy
Rebase main branch on release  /  rebase
Rebase main branch on release / rebase
Fit to window
Zoom out
Zoom in

Artifacts

Produced during runtime
Name Size Digest
artifact-ubuntu-latest-python-3.11 Expired
44.6 MB
sha256:13d1884e724279a76ae8f2fdc3f576d7a5a433c0ee1380d4ca5736ee42a74016
macaron-reports-vulnerable-actions-purl
36.2 KB
sha256:c0116ec39f8579ce7682f0883d429c0259c23fb6e3f45ca6803a91cbe7030887
macaron-reports-vulnerable-actions-repo
21.5 KB
sha256:4b4b4d04e0f0b97112eb1724a0bebdebb77b69d05fc2938bf4d7540639fcdb25
macaron-test-image Expired
378 MB
sha256:b2af8d82b6b56acbfd9eeef488d79ff1784d912cffa6bc534ac3a1386ea3162f
macaron-vulnerable-actions-fail-diagnosis
22.4 KB
sha256:14fdbc6ceb8791bd7f689ed0bcde70bfaa68bc99df5959d59e34bc82b228f1ee