Skip to content

Security

Security #20

Triggered via schedule May 31, 2026 00:20
Status Success
Total duration 1m 1s
Artifacts 5

security.yml

on: schedule
Secrets & SAST  /  Trivy Security Scan
46s
Secrets & SAST / Trivy Security Scan
Secrets & SAST  /  Secret Scanning
9s
Secrets & SAST / Secret Scanning
Secrets & SAST  /  Semgrep SAST
30s
Secrets & SAST / Semgrep SAST
Secrets & SAST  /  Generate SBOM
7s
Secrets & SAST / Generate SBOM
Secrets & SAST  /  Collect Scan Results
4s
Secrets & SAST / Collect Scan Results
Secrets & SAST  /  Security Summary
4s
Secrets & SAST / Security Summary
Fit to window
Zoom out
Zoom in

Annotations

2 warnings
Secrets & SAST / Trivy Security Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Secrets & SAST / Collect Scan Results
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
gitleaks-report Expired
12 KB
sha256:760f25b5e9a50ed3aff3927434ded66281d24e552f3a4c9f8c2122c432316e24
sbom
43.1 KB
sha256:ffcc8da5fa2d2a1002f515be1a167a97fd2bbbf4f13d0afb3ae09afc0fd6b4b9
scan-results
134 KB
sha256:848325be0fc83df2b500c82016d068b82d3bc30e552a2f887bc3b6d5b50a5a64
semgrep-report Expired
1.31 KB
sha256:8d275d19d3d2c622c1586439f8b0469807a83ab8485df46cf7e3d038cf7c78c4
trivy-reports Expired
77.7 KB
sha256:c281a1f666da70bdf43399aa28eccba8073736d1bb76be1b5625156d3bb869bc