Trivy security scan #26
- security-review require an approval to start deploying changes
alexnuttinck- security-review require an approval to start deploying changes
trivy.yml
on: schedule
Filesystem scan
1m 38s
build-push
5m 32s
Claude advisory analysis (fs)
Claude advisory analysis (image)
security-review
waiting for review
Deployment protection rules
Reviewers, timers, and other rules protecting deployments in this run
| Event | Environments |
|---|---|
alexnuttinck
requested review
|
security-review |
Annotations
5 warnings
|
Filesystem scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, github/codeql-action/upload-sarif@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Filesystem scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
build-push
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6.2.0, docker/login-action@v3, docker/setup-buildx-action@v3, docker/setup-qemu-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Image scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, github/codeql-action/upload-sarif@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Image scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
IMIO~buildout.smartweb~53OG8U.dockerbuild
|
95 KB |
sha256:0f93412cc844cc230ff9a337c83be1a9fb4ec9363dff837ab6d8a83585142a16
|
|
|
trivy-fs-c4951c6b9777588666de631259da47c3cf51e5ee
|
1.15 KB |
sha256:8629b367c5a3b2e93a5b0e28b8321680941cd390ed78d44584db651f36019865
|
|
|
trivy-fs-json-c4951c6b9777588666de631259da47c3cf51e5ee
|
1.56 KB |
sha256:e86474f3b6521c096cf9acc3d3c517e0e04f540f4a4ee235417c54ab25109fa1
|
|
|
trivy-image-c4951c6b9777588666de631259da47c3cf51e5ee
|
837 KB |
sha256:761e25370a775c3726f8017d3124f91a932b66c0fd1f66482c5abbc64eaf4111
|
|
|
trivy-image-json-c4951c6b9777588666de631259da47c3cf51e5ee
|
1.26 MB |
sha256:c841b929e7ec4f8f8e5d9519d0d5c4c2a38dddc29b7715940e9ab2f5f659a1e8
|
|