Skip to content

CodeQL Security Scan #1864

CodeQL Security Scan

CodeQL Security Scan #1864

Triggered via schedule May 17, 2026 03:36
Status Success
Total duration 21m 32s
Artifacts

codeql-analysis.yml

on: schedule
Matrix: analyze
Fit to window
Zoom out
Zoom in

Annotations

29 warnings and 2 notices
CodeQL - javascript - windows-latest
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v3, actions/setup-dotnet@v3, github/codeql-action/analyze@v3, github/codeql-action/init@v3, microsoft/setup-msbuild@v1.0.2, Nuget/setup-nuget@v1.0.5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
CodeQL - javascript - windows-latest: Ginger/GingerPluginCore/CommLib/NewPayload.cs#L513
Re-throwing caught exception changes stack information (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2200)
CodeQL - javascript - windows-latest: Ginger/GingerPluginCore/CommLib/RemoteObjectProxy.cs#L42
Re-throwing caught exception changes stack information (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2200)
CodeQL - javascript - windows-latest: Ginger/GingerUtils/BitmapManager.cs#L39
This call site is reachable on all platforms. 'Image.FromFile(string)' is only supported on: 'windows' 6.1 and later. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1416)
CodeQL - javascript - windows-latest: Ginger/GingerUtils/BitmapManager.cs#L29
This call site is reachable on all platforms. 'ImageFormat.Png' is only supported on: 'windows' 6.1 and later. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1416)
CodeQL - javascript - windows-latest: Ginger/GingerUtils/BitmapManager.cs#L29
This call site is reachable on all platforms. 'Image.Save(string, ImageFormat)' is only supported on: 'windows' 6.1 and later. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1416)
CodeQL - javascript - windows-latest: Ginger/GingerUtils/StringCompressor.cs#L71
Avoid inexact read with 'System.IO.Compression.GZipStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
CodeQL - javascript - windows-latest: Ginger/GingerUtils/StringCompressor.cs#L103
Avoid inexact read with 'System.IO.Compression.GZipStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
CodeQL - javascript - windows-latest
Targeting .NET 10.0 or higher in Visual Studio 2022 17.14 is not supported.
CodeQL - javascript - windows-latest
Targeting .NET 10.0 or higher in Visual Studio 2022 17.14 is not supported.
CodeQL - javascript - windows-latest
Targeting .NET 10.0 or higher in Visual Studio 2022 17.14 is not supported.
CodeQL - javascript - windows-latest
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
CodeQL - javascript - windows-latest
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
CodeQL - javascript - windows-latest
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
CodeQL - csharp - windows-latest
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v3, actions/setup-dotnet@v3, github/codeql-action/analyze@v3, github/codeql-action/init@v3, microsoft/setup-msbuild@v1.0.2, Nuget/setup-nuget@v1.0.5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
CodeQL - csharp - windows-latest: Ginger/GingerPluginCore/CommLib/NewPayload.cs#L513
Re-throwing caught exception changes stack information (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2200)
CodeQL - csharp - windows-latest: Ginger/GingerPluginCore/CommLib/RemoteObjectProxy.cs#L42
Re-throwing caught exception changes stack information (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2200)
CodeQL - csharp - windows-latest: Ginger/GingerUtils/BitmapManager.cs#L39
This call site is reachable on all platforms. 'Image.FromFile(string)' is only supported on: 'windows' 6.1 and later. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1416)
CodeQL - csharp - windows-latest: Ginger/GingerUtils/BitmapManager.cs#L29
This call site is reachable on all platforms. 'Image.Save(string, ImageFormat)' is only supported on: 'windows' 6.1 and later. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1416)
CodeQL - csharp - windows-latest: Ginger/GingerUtils/BitmapManager.cs#L29
This call site is reachable on all platforms. 'ImageFormat.Png' is only supported on: 'windows' 6.1 and later. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1416)
CodeQL - csharp - windows-latest: Ginger/GingerUtils/StringCompressor.cs#L71
Avoid inexact read with 'System.IO.Compression.GZipStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
CodeQL - csharp - windows-latest: Ginger/GingerUtils/StringCompressor.cs#L103
Avoid inexact read with 'System.IO.Compression.GZipStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
CodeQL - csharp - windows-latest
Targeting .NET 10.0 or higher in Visual Studio 2022 17.14 is not supported.
CodeQL - csharp - windows-latest
Targeting .NET 10.0 or higher in Visual Studio 2022 17.14 is not supported.
CodeQL - csharp - windows-latest
Targeting .NET 10.0 or higher in Visual Studio 2022 17.14 is not supported.
CodeQL - csharp - windows-latest
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
CodeQL - csharp - windows-latest
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
CodeQL - csharp - windows-latest
Cannot build an overlay-base database because build-mode is set to "undefined" instead of "none". Falling back to creating a normal full database instead.
CodeQL - csharp - windows-latest
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
CodeQL - javascript - windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
CodeQL - csharp - windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026