feat: Add comprehensive security plan for gh-aspnet-webapp blueprint #28
emmanuelknafocicd.yml
on: push
Build and Publish Container Image
/
set-version
6s
Deploy Azure Infrastructure
1m 46s
Build and Publish Container Image
/
...
/
scan-image
1m 16s
Build and Deploy to Azure Web App
1m 53s
Build and Publish Container Image
/
...
/
publish-image
1m 6s
Annotations
10 warnings and 3 notices
|
Build and Publish Container Image / scan-image / scan-image
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Build and Publish Container Image / scan-image / scan-image
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Build and Deploy to Azure Web App
Converting null literal or possible null value to non-nullable type.
|
|
Build and Deploy to Azure Web App
Possible null reference assignment.
|
|
Build and Deploy to Azure Web App
Converting null literal or possible null value to non-nullable type.
|
|
Build and Deploy to Azure Web App
Possible null reference assignment.
|
|
Build and Deploy to Azure Web App:
src/webapp01/Pages/Index.cshtml.cs#L22
Converting null literal or possible null value to non-nullable type.
|
|
Build and Deploy to Azure Web App:
src/webapp01/Pages/Index.cshtml.cs#L22
Possible null reference assignment.
|
|
Build and Deploy to Azure Web App:
src/webapp01/Pages/Index.cshtml.cs#L22
Converting null literal or possible null value to non-nullable type.
|
|
Build and Deploy to Azure Web App:
src/webapp01/Pages/Index.cshtml.cs#L22
Possible null reference assignment.
|
|
Build and Publish Container Image / publish-image / publish-image
Snapshot successfully created at 2026-01-29T13:04:51.354Z
|
|
Build and Publish Container Image / publish-image / publish-image
{
"manifests": {},
"version": 0,
"job": {
"correlator": "publish-image",
"id": "21479174445"
},
"sha": "c7eae76d5e6260080db704f18f89fc12b14d46e9",
"ref": "refs/heads/main",
"scanned": "2026-01-29T13:04:51.019Z",
"detector": {
"name": "spdx-to-dependency-graph-action",
"version": "0.1.1",
"url": "https://github.com/advanced-security/spdx-dependency-submission-action"
}
}
|
|
Build and Publish Container Image / publish-image / publish-image
Submitting snapshot...
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
devopsabcs-engineering~gh-advsec-devsecops~R3QS7X.dockerbuild
|
73.2 KB |
sha256:ea37b2035433119180dbbf1aa9b6b5dcc5d028157c36d6adec1f8482b468ad4a
|
|
|
devopsabcs-engineering~gh-advsec-devsecops~SE2OQL.dockerbuild
|
37.2 KB |
sha256:ab8319a61ccc0781a45a57b067f7da48605ef2ce8d2c323888558bb22cc08416
|
|
|
sarif
|
6.92 KB |
sha256:d91f1b8dcacb260b88f55f0cdf400825796793da5e25ed59a80465d828ba0046
|
|