Skip to content

Workflows do not restrict GITHUB_TOKEN permissions (Scorecard Token-Permissions) #588

Workflows do not restrict GITHUB_TOKEN permissions (Scorecard Token-Permissions)

Workflows do not restrict GITHUB_TOKEN permissions (Scorecard Token-Permissions) #588

Triggered via pull request August 14, 2026 06:46
@AkramBitarAkramBitar
synchronize #2223
fix-2219
Status Success
Total duration 9m 13s
Artifacts 4
Matrix: benchmark
Fit to window
Zoom out
Zoom in

Annotations

5 warnings
benchmark (csp, local, BenchmarkLocalTokenValidation, local-token-validation)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
benchmark (ipa, local, BenchmarkLocalTokenValidation, local-token-validation)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
benchmark (csp, grpc, BenchmarkAPIGRPC, api-grpc)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
benchmark (ipa, grpc, BenchmarkAPIGRPC, api-grpc)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
compare
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/download-artifact@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
benchmark-raw-grpc-csp
2.18 KB
sha256:23fed7121c52aa8482fab557fe969e6f18c7fcbe5548740124f9b032f008edd8
benchmark-raw-grpc-ipa
2.17 KB
sha256:7b4d314fa37e184d2e44b2e1499c0513b0b1999fc7d6d4e43136b79dd3c91361
benchmark-raw-local-csp
1 KB
sha256:4fa0b592b7488620109c68931f2c44afc0486939e4524f1a458b5082db5efb23
benchmark-raw-local-ipa
1 KB
sha256:682f6deca0b438ceac61123476a82935c51ffd5f320b694c8cb8794c64c11122