chore

[argentinaluiz]

No description provided.

[Copilot]

Pull Request Overview

A simple maintenance change that removes trailing whitespace from the GitHub Actions CI workflow file.

• Removes an empty line at the end of the CI workflow file

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[github-actions]

🔍 Vulnerabilities of argentinaluiz/docker-ci-test:5833b6c

📦 Image Reference argentinaluiz/docker-ci-test:5833b6c

digest	sha256:5bbe177688a6a6a8ec380cd3579680a918aa43d5971bfa0e3d2d4105dadc2246
vulnerabilities
platform	linux/amd64
size	94 MB
packages	449

📦 Base Image node:23-bookworm-slim

also known as	23-slim 23.0-bookworm-slim 23.0-slim 23.0.0-bookworm-slim 23.0.0-slim bookworm-slim current-bookworm-slim current-slim slim
digest	sha256:4fa2506a9768477d6ea2e7a1a2ca9591bea7672fd816a61a8094e7032c7699a6
vulnerabilities

glibc 2.36-9+deb12u8 (deb) pkg:deb/debian/glibc@2.36-9%2Bdeb12u8?os_distro=bookworm&os_name=debian&os_version=12 Affected range <2.36-9+deb12u11 Fixed version 2.36-9+deb12u11 EPSS Score 0.011% EPSS Percentile 1st percentile Description Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). glibc 2.39-4 [bookworm] - glibc 2.36-9+deb12u11 Introduced with: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=10e93d968716ab82931d593bada121c17c0a4b93 (glibc-2.27) Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=5451fa962cd0a90a0e2ec1d8910a559ace02bba0 (glibc-2.39) https://sourceware.org/bugzilla/show_bug.cgi?id=32976 https://www.openwall.com/lists/oss-security/2025/05/17/2 Affected range <2.36-9+deb12u10 Fixed version 2.36-9+deb12u10 EPSS Score 0.404% EPSS Percentile 60th percentile Description When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. glibc 2.40-6 [bookworm] - glibc 2.36-9+deb12u10 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://www.openwall.com/lists/oss-security/2025/01/22/4 Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=7d4b6bcae91f29d7b4daf15bab06b66cf1d2217c (2.40-branch) Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=7971add7ee4171fdd8dfd17e7c04c4ed77a18845 (2.36-branch) https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001 https://sourceware.org/pipermail/libc-announce/2025/000044.html

perl 5.36.0-7+deb12u1 (deb) pkg:deb/debian/perl@5.36.0-7%2Bdeb12u1?os_distro=bookworm&os_name=debian&os_version=12 Affected range <5.36.0-7+deb12u3 Fixed version 5.36.0-7+deb12u3 EPSS Score 0.911% EPSS Percentile 75th percentile Description CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. [experimental] - perl 5.38.0~rc2-1 perl 5.38.2-2 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035109) [bookworm] - perl 5.36.0-7+deb12u3 [buster] - perl (Minor issue) Add verify_SSL=>1 to HTTP::Tiny in CPAN::HTTP::Client to verify https server identity andk/cpanpm#175 andk/cpanpm@9c98370 (2.35-TRIAL)

cross-spawn 7.0.3 (npm) pkg:npm/cross-spawn@7.0.3 Inefficient Regular Expression Complexity Affected range >=7.0.0 <7.0.5 Fixed version 7.0.5 CVSS Score 7.7 CVSS Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P EPSS Score 0.129% EPSS Percentile 33rd percentile Description Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.