Trivy security scan #23
- security-review require an approval to start deploying changes
alexnuttinck- security-review require an approval to start deploying changes
trivy.yml
on: schedule
Filesystem scan
1m 30s
build-push
4m 29s
Claude advisory analysis (fs)
Claude advisory analysis (image)
security-review
waiting for review
Deployment protection rules
Reviewers, timers, and other rules protecting deployments in this run
| Event | Environments |
|---|---|
alexnuttinck
requested review
|
security-review |
Annotations
5 warnings
|
Filesystem scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, github/codeql-action/upload-sarif@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Filesystem scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
build-push
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6.2.0, docker/login-action@v3, docker/setup-buildx-action@v3, docker/setup-qemu-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Image scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, github/codeql-action/upload-sarif@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Image scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
IMIO~buildout.smartweb~BFVKV5.dockerbuild
|
94.1 KB |
sha256:de5793625754205fa8b7eb419dda20a8ac55c8f770a99eef0e30155f5a229579
|
|
|
trivy-fs-2683a051265ead513b573e948789495d24c46799
Expired
|
1.15 KB |
sha256:23f471b62e5db3a9d5cd7244bea8c320a0f5239dc1574549e75b7b9464c20c59
|
|
|
trivy-fs-json-2683a051265ead513b573e948789495d24c46799
Expired
|
1.56 KB |
sha256:d8bc9c52ed6ee7508ed39ffa17cdc2217efc2360076b7cbeb84cb13f100d27f5
|
|
|
trivy-image-2683a051265ead513b573e948789495d24c46799
Expired
|
546 KB |
sha256:6054227d5e1c171939bcd575f4626f97883e731e4089562dc80f8bc74d99de7f
|
|
|
trivy-image-json-2683a051265ead513b573e948789495d24c46799
Expired
|
901 KB |
sha256:63ad80b1ba41b232dbf60b7987aa09b3761df8cb73581b02db86ea84fa39e6de
|
|