fix(policy): grant managed startup CA bundle read access #3133
ericksoamanaged-images.yaml
on: pull_request
Matrix: build-and-validate
PR reviewed npm audit
3m 26s
Staging QA base permission regression (Deep Agents Code)
11m 50s
Matrix: pi-candidate-publish
Matrix: pi-candidate
Promote complete multi-platform managed image cohort
0s
Matrix: pr-build-and-entrypoint
PR exact all-agent managed runtime activation
6m 1s
Annotations
14 warnings
|
Sensitive data should not be used in the ARG or ENV commands:
agents/langchain-deepagents-code/Dockerfile#L315
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEEPAGENTS_CODE_OPENAI_API_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/langchain-deepagents-code/Dockerfile#L68
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Sensitive data should not be used in the ARG or ENV commands:
agents/langchain-deepagents-code/Dockerfile#L315
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEEPAGENTS_CODE_OPENAI_API_KEY")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/langchain-deepagents-code/Dockerfile#L68
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/pi/Dockerfile#L62
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Default value for global ARG results in an empty or invalid base image name:
agents/pi/Dockerfile#L62
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name
More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1668
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1665
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1702
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1668
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L1665
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DISABLE_DEVICE_AUTH")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
NVIDIA~NemoClaw~29I1YK.dockerbuild
|
167 KB |
sha256:23d854f0d3e8464b70064dcbf62af0575932c61329d16b1a3adc71b35b89bbde
|
|
|
NVIDIA~NemoClaw~5ROE0M.dockerbuild
|
142 KB |
sha256:870aa6192a1b335379ba36b61c66ac107d52dbe9622b66e2a9f32a97bb510bc8
|
|
|
NVIDIA~NemoClaw~8ESTJY.dockerbuild
|
94.5 KB |
sha256:4d741b7a82c59468d17b1a21b0fb6a8b97691dde4ee8371b1edadf63ad4ec993
|
|
|
NVIDIA~NemoClaw~I6XQJH.dockerbuild
|
1.93 MB |
sha256:7942e42798a44016e114f6f96513a2ce685a4ed065a2bdfb85b72dc9a837fcca
|
|
|
NVIDIA~NemoClaw~JZXZOD.dockerbuild
|
271 KB |
sha256:c2abde64208061ad17ab12a37e80adc2e594b33cc9bcad17cfd11941f1e893d4
|
|
|
NVIDIA~NemoClaw~L5LV0P.dockerbuild
|
93 KB |
sha256:baceb14c344fcb23f02fcee8fb4e07cdfc56f32ffba9ca66e3959a4e73740c28
|
|
|
NVIDIA~NemoClaw~OLO9JH.dockerbuild
|
1.85 MB |
sha256:a5732e6b84bb951d35d93ec3be258972534e600b1a7a4df57feafeadda32cddb
|
|
|
NVIDIA~NemoClaw~WABUK8.dockerbuild
|
337 KB |
sha256:28a891bd71f5469cb3d869f57a337348e837b588fbc5701e5f3032ba7b91c4a6
|
|
|
managed-image-activation-32094114176-1
Expired
|
150 KB |
sha256:2c32b96cc5e58c3a61116ba6895c788bc0ebfa2e89c42e098c5e8db4b8450e20
|
|
|
managed-pr-contract-32094114176-1-hermes
Expired
|
455 Bytes |
sha256:f30eda8f77ebd6ae99d741001a681cfd65e118d21bb62ae9434cb198e917ac19
|
|
|
managed-pr-contract-32094114176-1-langchain-deepagents-code
Expired
|
462 Bytes |
sha256:324379bfd74c798fe4b17fe285f328a43a473b8d2a6319f00d34a7be05aa0ea3
|
|
|
managed-pr-contract-32094114176-1-openclaw
Expired
|
453 Bytes |
sha256:66e77d80c5a9d0ee46820a1f09c5b8e1ef514afe0ee9b24a77ce4a179b8bc7ca
|
|
|
reviewed-npm-audit
|
7.88 KB |
sha256:6eaca3ee7a4e1b34a50e63a2f88375bd6ee457cbd7d38cf045fd98987dbf2749
|
|