Skip to content

Bump shared-github-actions to v0.0.22 - #100

Merged
thescouser89 merged 1 commit into
project-ncl:masterfrom
patrikk0123:bumpSharedWorkflows-v0.0.22
Aug 6, 2026
Merged

Bump shared-github-actions to v0.0.22#100
thescouser89 merged 1 commit into
project-ncl:masterfrom
patrikk0123:bumpSharedWorkflows-v0.0.22

Conversation

@patrikk0123

Copy link
Copy Markdown
Member

No description provided.

@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output
| Upgrade to version org.postgresql:postgresql:42.7.12, https://github.com/pgjdbc/pgjdbc.git -         |
|          |                                       |                | REL42.7.12                                                                                           |
+----------+---------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

quarkus-jdbc-postgresql-3.37.2.jar
|-- postgresql-42.7.11.jar [1 MEDIUM]
quarkus-micrometer-opentelemetry-3.37.2.jar
|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- quarkus-opentelemetry-3.37.2.jar
	|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-annotations-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-api-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-jdbc-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
		|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-api-incubator-1.60.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-common-1.60.1.jar
		|-- opentelemetry-exporter-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-1.60.1.jar
		|-- opentelemetry-sdk-metrics-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-trace-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-sdk-1.60.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-logs-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-grpc-common-3.37.2.jar
		|-- vertx-grpc-server-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-4.5.28.jar
			|-- grpc-netty-1.81.0.jar
				|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-tls-registry-3.37.2.jar
		|-- smallrye-private-key-pem-parser-0.9.3.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- smallrye-common-vertx-context-2.18.1.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- vertx-grpc-client-4.5.28.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-common-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
quarkus-resteasy-jsonb-3.37.2.jar
|-- jackson-databind-2.22.0.jar [2 MEDIUM]
quarkus-resteasy-3.37.2.jar
|-- quarkus-vertx-utils-3.37.2.jar
	|-- vertx-web-4.5.28.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- vertx-auth-common-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-bridge-common-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-common-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-resteasy-server-common-3.37.2.jar
	|-- quarkus-resteasy-common-3.37.2.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
quarkus-scheduler-3.37.2.jar
|-- quarkus-vertx-3.37.2.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
		|-- netty-codec-4.1.135.Final.jar [1 HIGH]
	|-- quarkus-netty-3.37.2.jar
		|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 4 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 4 MEDIUM]
		|-- netty-codec-4.1.135.Final.jar [1 HIGH]
	|-- smallrye-mutiny-vertx-core-3.22.2.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- smallrye-fault-tolerance-vertx-6.11.1.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-virtual-threads-3.37.2.jar
	|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
		|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
		|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 4 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- netty-handler-proxy-4.1.135.Final.jar
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 4 MEDIUM]
			|-- netty-codec-socks-4.1.135.Final.jar
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- netty-handler-4.1.135.Final.jar
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- netty-resolver-dns-4.1.135.Final.jar
			|-- netty-codec-dns-4.1.135.Final.jar
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
quarkus-smallrye-openapi-3.37.2.jar
|-- quarkus-vertx-http-3.37.2.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- smallrye-mutiny-vertx-web-3.22.2.jar
		|-- smallrye-mutiny-vertx-uri-template-3.22.2.jar
			|-- vertx-uri-template-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- smallrye-open-api-core-4.3.3.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- jackson-dataformat-yaml-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
pnc-api-3.5.2.jar
|-- jackson-databind-2.22.0.jar [2 MEDIUM]


No Policy violations were detected

Project 'uilogger' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=6ca5d47f-9a9f-4e41-952c-d74df9e42cad
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=502c7274beb747329b34f56627f422d54f0a6df63ac0466fa6dff2503f046401

Mend AI scan succeeded.

Support Token: 367c68a38392245b2a45212a6cca69a201785855912293
SAST scan output
*no findings*

Full logs and artifacts

@thescouser89
thescouser89 merged commit 7945380 into project-ncl:master Aug 6, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants