Skip to content

chore(deps): update yxtay/.github digest to d7d7602 - #446

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-digest
Aug 22, 2026
Merged

chore(deps): update yxtay/.github digest to d7d7602#446
renovate[bot] merged 1 commit into
mainfrom
renovate/all-digest

Conversation

@renovate

@renovate renovate Bot commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
yxtay/.github (changelog) action digest ee64aff → d7d7602 OpenSSF Scorecard

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) August 22, 2026 02:28
@renovate
renovate Bot requested a review from yxtay as a code owner August 22, 2026 02:28
@github-actions

github-actions Bot commented Aug 22, 2026

Copy link
Copy Markdown

✅MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ JSON prettier 1 0 0 0 0.26s
✅ MARKDOWN markdownlint 2 0 0 0 0.38s
✅ MARKDOWN markdown-table-formatter 2 0 0 0 0.11s
✅ YAML prettier 11 0 0 0 0.41s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS, TERRAFORM_TERRASCAN. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,YAML_PRETTIER

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 22, 2026

Copy link
Copy Markdown

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ COPYPASTE jscpd yes no no 0.4s
✅ DOCKERFILE hadolint 1 0 0 0.16s
✅ JSON prettier 1 0 0 0 0.29s
✅ JSON v8r 1 0 0 1.41s
✅ REPOSITORY betterleaks yes no no 0.68s
✅ REPOSITORY git_diff yes no no 0.0s
⚠️ REPOSITORY osv-scanner yes 32 no 8.38s
✅ REPOSITORY secretlint yes no no 0.62s
✅ REPOSITORY syft yes no no 1.17s
✅ REPOSITORY trivy yes no no 8.41s
✅ REPOSITORY trivy-sbom yes no no 0.06s
✅ REPOSITORY trufflehog yes no no 1.94s
✅ YAML prettier 11 0 0 0 0.34s
✅ YAML v8r 11 0 0 4.13s
✅ YAML yamllint 11 0 0 0.41s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 32 errors 
Scanning dir .
Starting filesystem walk for root: /
Scanned requirements.txt file and found 9 packages
End status: 5 dirs visited, 29 inodes visited, 1 Extract calls, 699.4µs elapsed, 699.5µs wall time
Filtered 2 local/unscannable package/s from the scan.

Total 4 packages affected by 34 known vulnerabilities (1 Critical, 19 High, 12 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
34 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE           |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| https://osv.dev/PYSEC-2020-173      | 8.7  | PyPI      | pip        | 9.0.3   | 19.2          | requirements.txt |
| https://osv.dev/GHSA-gpvv-69j7-gwj8 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2021-437      | 7.1  | PyPI      | pip        | 9.0.3   | 21.1          | requirements.txt |
| https://osv.dev/GHSA-5xp3-jfq3-5q8x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-228      | 6.8  | PyPI      | pip        | 9.0.3   | 23.3          | requirements.txt |
| https://osv.dev/GHSA-mq26-g339-26xf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1795     | 5.9  | PyPI      | pip        | 9.0.3   | 25.3          | requirements.txt |
| https://osv.dev/GHSA-4xh5-x5gv-qwph |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1796     | 2.0  | PyPI      | pip        | 9.0.3   | 26.0          | requirements.txt |
| https://osv.dev/GHSA-6vgw-5pg2-w6jp |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-196      | 8.0  | PyPI      | pip        | 9.0.3   | 26.1.2        | requirements.txt |
| https://osv.dev/GHSA-wf93-45jw-7689 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2875     | 4.6  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-58qw-9mgm-455v |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2876     | 5.3  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-jp4c-xjxw-mgf9 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3721     | 6.5  | PyPI      | pip        | 9.0.3   | 26.2          | requirements.txt |
| https://osv.dev/PYSEC-2022-43012    | 8.7  | PyPI      | setuptools | 9.1.0   | 65.5.1        | requirements.txt |
| https://osv.dev/GHSA-r9hx-vwmv-q579 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2025-49       | 8.8  | PyPI      | setuptools | 9.1.0   | 78.1.1        | requirements.txt |
| https://osv.dev/GHSA-5rjg-fvgr-3xxf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1918     | 8.8  | PyPI      | setuptools | 9.1.0   | 70.0.0        | requirements.txt |
| https://osv.dev/GHSA-cx63-2mw6-8hw5 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3447     | 6.1  | PyPI      | setuptools | 9.1.0   | 83.0.0        | requirements.txt |
| https://osv.dev/GHSA-h35f-9h28-mq5c |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1374     | 5.3  | PyPI      | filelock   | 3.19.1  | 3.20.3        | requirements.txt |
| https://osv.dev/GHSA-qmgc-5h2g-mvrw |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1375     | 6.3  | PyPI      | filelock   | 3.19.1  | 3.20.1        | requirements.txt |
| https://osv.dev/GHSA-w853-jp5j-5j7f |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-175      |      | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/PYSEC-2023-227      | 8.7  | PyPI      | pillow     | 9.5.0   | 10.0.0        | requirements.txt |
| https://osv.dev/GHSA-8ghj-p4vj-mr35 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-165      | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-wjx4-4jcj-g98j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1793     | 7.3  | PyPI      | pillow     | 9.5.0   | 10.3.0        | requirements.txt |
| https://osv.dev/GHSA-44wm-f244-xhp3 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1794     | 8.8  | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/GHSA-j7hp-h8jx-5ppr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2253     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-8v84-f9pq-wr9x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2254     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-5x94-69rx-g8h2 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2255     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-45hq-cxwh-f6vc |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2256     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-phj9-mv4w-65pm |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2257     | 4.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-4x4j-2g7c-83w6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2874     | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-r73j-pqj5-w3x7 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3451     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-6r8x-57c9-28j4 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3453     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-9hw9-ch79-4vh6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3454     | 8.2  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-xj96-63gp-2gmr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3493     | 8.3  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-62p4-gmf7-7g93 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3494     | 6.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-fj7v-r99m-22gq |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3495     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-jjj6-mw9f-p565 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3496     | 8.7  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-vjc4-5qp5-m44j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-457      | 9.3  | PyPI      | pillow     | 9.5.0   | 10.2.0        | requirements.txt |
| https://osv.dev/GHSA-3f63-hfp8-52jq |      |           |            |         |               |                  |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS, TERRAFORM_TERRASCAN. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 22, 2026

Copy link
Copy Markdown

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ DOCKERFILE hadolint 1 0 0 0.32s
✅ REPOSITORY betterleaks yes no no 2.18s
✅ REPOSITORY devskim yes no no 1.3s
✅ REPOSITORY dustilock yes no no 0.77s
✅ REPOSITORY gitleaks yes no no 0.4s
⚠️ REPOSITORY osv-scanner yes 32 no 7.17s
✅ REPOSITORY secretlint yes no no 1.3s
✅ REPOSITORY semgrep yes no no 16.31s
✅ REPOSITORY syft yes no no 2.48s
✅ REPOSITORY trivy yes no no 9.91s
✅ REPOSITORY trivy-sbom yes no no 0.09s
✅ REPOSITORY trufflehog yes no no 2.69s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 32 errors 
Scanning dir .
Starting filesystem walk for root: /
Scanned requirements.txt file and found 9 packages
End status: 22 dirs visited, 75 inodes visited, 1 Extract calls, 5.300344ms elapsed, 5.300554ms wall time
Filtered 2 local/unscannable package/s from the scan.

Total 4 packages affected by 34 known vulnerabilities (1 Critical, 19 High, 12 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
34 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE           |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| https://osv.dev/PYSEC-2020-173      | 8.7  | PyPI      | pip        | 9.0.3   | 19.2          | requirements.txt |
| https://osv.dev/GHSA-gpvv-69j7-gwj8 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2021-437      | 7.1  | PyPI      | pip        | 9.0.3   | 21.1          | requirements.txt |
| https://osv.dev/GHSA-5xp3-jfq3-5q8x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-228      | 6.8  | PyPI      | pip        | 9.0.3   | 23.3          | requirements.txt |
| https://osv.dev/GHSA-mq26-g339-26xf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1795     | 5.9  | PyPI      | pip        | 9.0.3   | 25.3          | requirements.txt |
| https://osv.dev/GHSA-4xh5-x5gv-qwph |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1796     | 2.0  | PyPI      | pip        | 9.0.3   | 26.0          | requirements.txt |
| https://osv.dev/GHSA-6vgw-5pg2-w6jp |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-196      | 8.0  | PyPI      | pip        | 9.0.3   | 26.1.2        | requirements.txt |
| https://osv.dev/GHSA-wf93-45jw-7689 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2875     | 4.6  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-58qw-9mgm-455v |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2876     | 5.3  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-jp4c-xjxw-mgf9 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3721     | 6.5  | PyPI      | pip        | 9.0.3   | 26.2          | requirements.txt |
| https://osv.dev/PYSEC-2022-43012    | 8.7  | PyPI      | setuptools | 9.1.0   | 65.5.1        | requirements.txt |
| https://osv.dev/GHSA-r9hx-vwmv-q579 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2025-49       | 8.8  | PyPI      | setuptools | 9.1.0   | 78.1.1        | requirements.txt |
| https://osv.dev/GHSA-5rjg-fvgr-3xxf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1918     | 8.8  | PyPI      | setuptools | 9.1.0   | 70.0.0        | requirements.txt |
| https://osv.dev/GHSA-cx63-2mw6-8hw5 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3447     | 6.1  | PyPI      | setuptools | 9.1.0   | 83.0.0        | requirements.txt |
| https://osv.dev/GHSA-h35f-9h28-mq5c |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1374     | 5.3  | PyPI      | filelock   | 3.19.1  | 3.20.3        | requirements.txt |
| https://osv.dev/GHSA-qmgc-5h2g-mvrw |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1375     | 6.3  | PyPI      | filelock   | 3.19.1  | 3.20.1        | requirements.txt |
| https://osv.dev/GHSA-w853-jp5j-5j7f |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-175      |      | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/PYSEC-2023-227      | 8.7  | PyPI      | pillow     | 9.5.0   | 10.0.0        | requirements.txt |
| https://osv.dev/GHSA-8ghj-p4vj-mr35 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-165      | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-wjx4-4jcj-g98j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1793     | 7.3  | PyPI      | pillow     | 9.5.0   | 10.3.0        | requirements.txt |
| https://osv.dev/GHSA-44wm-f244-xhp3 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1794     | 8.8  | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/GHSA-j7hp-h8jx-5ppr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2253     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-8v84-f9pq-wr9x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2254     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-5x94-69rx-g8h2 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2255     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-45hq-cxwh-f6vc |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2256     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-phj9-mv4w-65pm |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2257     | 4.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-4x4j-2g7c-83w6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2874     | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-r73j-pqj5-w3x7 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3451     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-6r8x-57c9-28j4 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3453     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-9hw9-ch79-4vh6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3454     | 8.2  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-xj96-63gp-2gmr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3493     | 8.3  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-62p4-gmf7-7g93 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3494     | 6.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-fj7v-r99m-22gq |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3495     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-jjj6-mw9f-p565 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3496     | 8.7  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-vjc4-5qp5-m44j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-457      | 9.3  | PyPI      | pillow     | 9.5.0   | 10.2.0        | requirements.txt |
| https://osv.dev/GHSA-3f63-hfp8-52jq |      |           |            |         |               |                  |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters DOCKERFILE_HADOLINT,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 22, 2026

Copy link
Copy Markdown

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.27s
✅ ACTION zizmor 5 0 0 0 1.01s
✅ COPYPASTE jscpd yes no no 0.08s
✅ DOCKERFILE hadolint 1 0 0 0.37s
✅ EDITORCONFIG editorconfig-checker 23 0 0 0.03s
✅ JSON prettier 1 0 0 0 0.25s
✅ JSON v8r 1 0 0 1.56s
✅ MARKDOWN markdownlint 2 0 0 0 0.59s
✅ MARKDOWN markdown-table-formatter 2 0 0 0 0.16s
✅ REPOSITORY betterleaks yes no no 2.32s
✅ REPOSITORY gitleaks yes no no 0.48s
✅ REPOSITORY git_diff yes no no 0.0s
⚠️ REPOSITORY osv-scanner yes 32 no 7.1s
✅ REPOSITORY secretlint yes no no 0.92s
✅ REPOSITORY semgrep yes no no 17.68s
✅ REPOSITORY syft yes no no 2.82s
✅ REPOSITORY trivy yes no no 9.48s
✅ REPOSITORY trivy-sbom yes no no 0.09s
✅ REPOSITORY trufflehog yes no no 4.5s
✅ SPELL lychee 15 0 0 1.02s
✅ YAML prettier 11 0 0 0 0.59s
✅ YAML v8r 11 0 0 5.93s
✅ YAML yamllint 11 0 0 0.42s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 32 errors 
Scanning dir .
Starting filesystem walk for root: /
Scanned requirements.txt file and found 9 packages
End status: 23 dirs visited, 86 inodes visited, 1 Extract calls, 5.144503ms elapsed, 5.144744ms wall time
Filtered 2 local/unscannable package/s from the scan.

Total 4 packages affected by 34 known vulnerabilities (1 Critical, 19 High, 12 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
34 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE           |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| https://osv.dev/PYSEC-2020-173      | 8.7  | PyPI      | pip        | 9.0.3   | 19.2          | requirements.txt |
| https://osv.dev/GHSA-gpvv-69j7-gwj8 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2021-437      | 7.1  | PyPI      | pip        | 9.0.3   | 21.1          | requirements.txt |
| https://osv.dev/GHSA-5xp3-jfq3-5q8x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-228      | 6.8  | PyPI      | pip        | 9.0.3   | 23.3          | requirements.txt |
| https://osv.dev/GHSA-mq26-g339-26xf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1795     | 5.9  | PyPI      | pip        | 9.0.3   | 25.3          | requirements.txt |
| https://osv.dev/GHSA-4xh5-x5gv-qwph |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1796     | 2.0  | PyPI      | pip        | 9.0.3   | 26.0          | requirements.txt |
| https://osv.dev/GHSA-6vgw-5pg2-w6jp |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-196      | 8.0  | PyPI      | pip        | 9.0.3   | 26.1.2        | requirements.txt |
| https://osv.dev/GHSA-wf93-45jw-7689 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2875     | 4.6  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-58qw-9mgm-455v |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2876     | 5.3  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-jp4c-xjxw-mgf9 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3721     | 6.5  | PyPI      | pip        | 9.0.3   | 26.2          | requirements.txt |
| https://osv.dev/PYSEC-2022-43012    | 8.7  | PyPI      | setuptools | 9.1.0   | 65.5.1        | requirements.txt |
| https://osv.dev/GHSA-r9hx-vwmv-q579 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2025-49       | 8.8  | PyPI      | setuptools | 9.1.0   | 78.1.1        | requirements.txt |
| https://osv.dev/GHSA-5rjg-fvgr-3xxf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1918     | 8.8  | PyPI      | setuptools | 9.1.0   | 70.0.0        | requirements.txt |
| https://osv.dev/GHSA-cx63-2mw6-8hw5 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3447     | 6.1  | PyPI      | setuptools | 9.1.0   | 83.0.0        | requirements.txt |
| https://osv.dev/GHSA-h35f-9h28-mq5c |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1374     | 5.3  | PyPI      | filelock   | 3.19.1  | 3.20.3        | requirements.txt |
| https://osv.dev/GHSA-qmgc-5h2g-mvrw |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1375     | 6.3  | PyPI      | filelock   | 3.19.1  | 3.20.1        | requirements.txt |
| https://osv.dev/GHSA-w853-jp5j-5j7f |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-175      |      | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/PYSEC-2023-227      | 8.7  | PyPI      | pillow     | 9.5.0   | 10.0.0        | requirements.txt |
| https://osv.dev/GHSA-8ghj-p4vj-mr35 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-165      | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-wjx4-4jcj-g98j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1793     | 7.3  | PyPI      | pillow     | 9.5.0   | 10.3.0        | requirements.txt |
| https://osv.dev/GHSA-44wm-f244-xhp3 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1794     | 8.8  | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/GHSA-j7hp-h8jx-5ppr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2253     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-8v84-f9pq-wr9x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2254     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-5x94-69rx-g8h2 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2255     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-45hq-cxwh-f6vc |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2256     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-phj9-mv4w-65pm |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2257     | 4.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-4x4j-2g7c-83w6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2874     | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-r73j-pqj5-w3x7 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3451     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-6r8x-57c9-28j4 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3453     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-9hw9-ch79-4vh6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3454     | 8.2  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-xj96-63gp-2gmr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3493     | 8.3  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-62p4-gmf7-7g93 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3494     | 6.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-fj7v-r99m-22gq |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3495     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-jjj6-mw9f-p565 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3496     | 8.7  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-vjc4-5qp5-m44j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-457      | 9.3  | PyPI      | pillow     | 9.5.0   | 10.2.0        | requirements.txt |
| https://osv.dev/GHSA-3f63-hfp8-52jq |      |           |            |         |               |                  |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@renovate
renovate Bot merged commit 1418569 into main Aug 22, 2026
37 checks passed
@renovate
renovate Bot deleted the renovate/all-digest branch August 22, 2026 02:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@yxtay yxtay yxtay approved these changes

Assignees

No one assigned

Labels

size/XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@yxtay