fix(onboard): reject an unsafe custom endpoint URL before any mutation #3029
apurvvkumariamanaged-images.yaml
on: pull_request
Matrix: build-and-validate
PR reviewed npm audit
3m 27s
Staging QA base permission regression (Deep Agents Code)
11m 8s
Matrix: pi-candidate-publish
Matrix: pi-candidate
Promote complete multi-platform managed image cohort
0s
Matrix: pr-build-and-entrypoint
PR exact all-agent managed runtime activation
8m 0s
Annotations
14 warnings
|
Sensitive data should not be used in the ARG or ENV commands:
agents/langchain-deepagents-code/Dockerfile#L315
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEEPAGENTS_CODE_OPENAI_API_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/langchain-deepagents-code/Dockerfile#L68
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Sensitive data should not be used in the ARG or ENV commands:
agents/langchain-deepagents-code/Dockerfile#L315
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEEPAGENTS_CODE_OPENAI_API_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/langchain-deepagents-code/Dockerfile#L68
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/pi/Dockerfile#L62
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/pi/Dockerfile#L62
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1668
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1665
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1668
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1665
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
NVIDIA~NemoClaw~0TY4K4.dockerbuild
|
168 KB |
sha256:91c573fad2a1cfff06c5bc25951f2adbc24bc1f0681d32718ab067616eca3e28
|
|
|
NVIDIA~NemoClaw~713X4D.dockerbuild
|
95.3 KB |
sha256:110586c43f4813e62b4b9c2ddec0e47eabea272aff3677ab11b992d0f281b50a
|
|
|
NVIDIA~NemoClaw~LXHPS8.dockerbuild
|
1.84 MB |
sha256:7dc60fee9a123b842e8598d3254b4cf5f0bb455fd2b9717e18f4e49543bbc405
|
|
|
NVIDIA~NemoClaw~N27UH3.dockerbuild
|
337 KB |
sha256:a7c5bc3ea79d3079de10fb79c66f9ab99c15428b16ac8bf94f55210cda71422f
|
|
|
NVIDIA~NemoClaw~RVY6HP.dockerbuild
|
273 KB |
sha256:09b17453e21c8dbfe8375f3cdef6bc861875de3cc769cdd1d2bc8a1eb443b3b6
|
|
|
NVIDIA~NemoClaw~UCMGDX.dockerbuild
|
93.4 KB |
sha256:4a47452df4be6b5657d705b493c9b61b06342cba90ae35337ff4194193769d1a
|
|
|
NVIDIA~NemoClaw~VXF4N9.dockerbuild
|
143 KB |
sha256:d629eaefb9dba3673efa1a3843dc7db443f57cfbd69433434351be80b0163974
|
|
|
NVIDIA~NemoClaw~YX9E39.dockerbuild
|
1.91 MB |
sha256:3b4403f12cc8fe53fd8d38998fe0c7bbdfadd429c70ed7168a2bc21822fada88
|
|
|
managed-image-activation-32065301813-1
Expired
|
149 KB |
sha256:d64a71c104f472c5dda52a6bd5c58d48f5e231b3e8dfb65b2229fd87b78cdf0c
|
|
|
managed-pr-contract-32065301813-1-hermes
Expired
|
453 Bytes |
sha256:a6d22b590f024dde518df5ac17d644330bb35a39a2b510765e30f357b92439eb
|
|
|
managed-pr-contract-32065301813-1-langchain-deepagents-code
Expired
|
463 Bytes |
sha256:6ac99f0e66b360415d46701aa66a721275bcd7cd0007c76e17c19108ae105621
|
|
|
managed-pr-contract-32065301813-1-openclaw
Expired
|
452 Bytes |
sha256:3ad9bed895e5bdd601fcd2c530dc0d0244c5f885dd2f98a841cce80c1fa2d5aa
|
|
|
reviewed-npm-audit
|
7.88 KB |
sha256:074e9203cae1b1d53c1c89016753b253c8cef79394653c1dbab08bf5ff67c2c8
|
|