SCA - Dependency Review

Workflow runs for SCA - Dependency Review

• Add DevSecOps-10309 demo page with intentional vulnerabilities for GHAS scanning

  failed:
  SCA - Dependency Review#167:Pull request#143synchronizebyCalinL
  copilot/featuredevsecops-demo-12345-yet-again

  Oct 8, 202613s
  More actions for workflow run 167

• Bump Microsoft.Data.SqlClient from 5.0.2 to 7.0.2

  completed successfully:
  SCA - Dependency Review#166:Pull request#166openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.2

  Jun 29, 202612s
  More actions for workflow run 166

• Bump System.Text.Json from 9.0.13 to 10.0.9

  completed successfully:
  SCA - Dependency Review#165:Pull request#165openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/System.Text.Json-10.0.9

  Jun 15, 202616s
  More actions for workflow run 165

• Bump System.Text.Json from 9.0.13 to 10.0.8

  completed successfully:
  SCA - Dependency Review#164:Pull request#164openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/System.Text.Json-10.0.8

  May 18, 202610s
  More actions for workflow run 164

• Bump System.Text.Json from 9.0.13 to 10.0.7

  completed successfully:
  SCA - Dependency Review#163:Pull request#163openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/System.Text.Json-10.0.7

  Apr 27, 202615s
  More actions for workflow run 163

• Bump Microsoft.Data.SqlClient from 5.0.2 to 7.0.1

  completed successfully:
  SCA - Dependency Review#162:Pull request#162openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.1

  Apr 27, 202613s
  More actions for workflow run 162

• Bump System.Text.Json from 9.0.13 to 10.0.6

  completed successfully:
  SCA - Dependency Review#161:Pull request#161openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/System.Text.Json-10.0.6

  Apr 20, 202611s
  More actions for workflow run 161

• Bump Azure.Identity from 1.13.2 to 1.21.0

  completed successfully:
  SCA - Dependency Review#160:Pull request#160openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Azure.Identity-1.21.0

  Apr 13, 20269s
  More actions for workflow run 160

• Bump Azure.Identity from 1.13.2 to 1.20.0

  completed successfully:
  SCA - Dependency Review#159:Pull request#159openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Azure.Identity-1.20.0

  Apr 6, 202612s
  More actions for workflow run 159

• feat: Add initial Dockerfile, Pipfile.lock, and Terraform example for…

  failed:
  SCA - Dependency Review#158:Pull request#158openedbyCalinL
  demo-devsecops-02

  Apr 2, 202613s
  More actions for workflow run 158

• Bump advanced-security/spdx-dependency-submission-action from 0.1.1 to 0.2.0

  completed successfully:
  SCA - Dependency Review#157:Pull request#157openedbydependabot[bot]Bot
  dependabot/github_actions/advanced-security/spdx-dependency-submission-action-0.2.0

  Mar 31, 202611s
  More actions for workflow run 157

• Bump actions/upload-artifact from 4.6.1 to 7.0.0

  completed successfully:
  SCA - Dependency Review#156:Pull request#156openedbydependabot[bot]Bot
  dependabot/github_actions/actions/upload-artifact-7.0.0

  Mar 31, 202610s
  More actions for workflow run 156

• Bump azure/webapps-deploy from 8db8b8d14f21b245e6706fd0607244e354884697 to 45c7df8f6a4fe841b67ff88920b33f4f8328f8d9

  completed successfully:
  SCA - Dependency Review#155:Pull request#155openedbydependabot[bot]Bot
  dependabot/github_actions/azure/webapps-deploy-45c7df8f6a4fe841b67ff88920b33f4f8328f8d9

  Mar 31, 20269s
  More actions for workflow run 155

• Bump anchore/sbom-action from 0.20.5 to 0.24.0

  completed successfully:
  SCA - Dependency Review#154:Pull request#154openedbydependabot[bot]Bot
  dependabot/github_actions/anchore/sbom-action-0.24.0

  Mar 31, 202612s
  More actions for workflow run 154

• Add initial Dockerfile, Pipfile.lock, and Terraform configuration for…

  failed:
  SCA - Dependency Review#153:Pull request#153openedbyCalinL
  demo-devsecops

  Mar 30, 202613s
  More actions for workflow run 153

• Update workflow actions to latest versions for improved security and …

  completed successfully:
  SCA - Dependency Review#152:Pull request#152openedbyCalinL
  update-workflows

  Mar 30, 202613s
  More actions for workflow run 152

• Bump Microsoft.Data.SqlClient from 5.0.2 to 7.0.0

  completed successfully:
  SCA - Dependency Review#151:Pull request#151openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.0

  Mar 23, 202612s
  More actions for workflow run 151

• Bump System.Text.Json from 9.0.13 to 10.0.5

  completed successfully:
  SCA - Dependency Review#150:Pull request#149openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/System.Text.Json-10.0.5

  Mar 16, 202610s
  More actions for workflow run 150

• Bump Azure.Identity from 1.13.2 to 1.19.0

  completed successfully:
  SCA - Dependency Review#149:Pull request#148openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Azure.Identity-1.19.0

  Mar 16, 202610s
  More actions for workflow run 149

• added tools to the custom agents

  completed successfully:
  SCA - Dependency Review#148:Pull request#147openedbyemmanuelknafo
  feature/added-tools-to-agents-properly

  Mar 13, 202611s
  More actions for workflow run 148

• Bump Azure.Identity from 1.13.2 to 1.18.0

  completed successfully:
  SCA - Dependency Review#147:Pull request#146openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/Azure.Identity-1.18.0

  Mar 2, 20269s
  More actions for workflow run 147

• Bump aquasecurity/trivy-action from 0.32.0 to 0.34.0 in /.github/workflows in the github_actions group across 1 directory

  completed successfully:
  SCA - Dependency Review#146:Pull request#145openedbydependabot[bot]Bot
  dependabot/github_actions/dot-github/workflows/github_actions-9bddd90c58

  Feb 18, 202610s
  More actions for workflow run 146

• Bump System.Text.Json from 9.0.11 to 10.0.3

  completed successfully:
  SCA - Dependency Review#145:Pull request#144openedbydependabot[bot]Bot
  dependabot/nuget/src/webapp01/System.Text.Json-10.0.3

  Feb 16, 202611s
  More actions for workflow run 145

• Add demo files with intentional security vulnerabilities for GitHub A…

  failed:
  SCA - Dependency Review#142:Pull request#142openedbyCalinL
  feature/devsecops-demo-code04

  Feb 12, 202610s
  More actions for workflow run 142

• Demo-Code02 - Add demo files with intentional security vulnerabilities for GitHub A…

  failed:
  SCA - Dependency Review#138:Pull request#138openedbyCalinL
  feature/devsecops-demo-code02

  Feb 10, 202613s
  More actions for workflow run 138