Skip to content
Security Automation

feat(gamification): build subscription gamification system with achievements #838

Sign in to view logs

feat(gamification): build subscription gamification system with achievements

feat(gamification): build subscription gamification system with achievements #838

Triggered via pull request August 27, 2026 02:37
@morelucksmorelucks
opened #1026
morelucks:feat/subscription-gamification
Status Failure
Total duration 3m 45s
Artifacts 3

security-scan.yml

on: pull_request
SAST - Semgrep OWASP Top 10
1m 29s
SAST - Semgrep OWASP Top 10
Dependency Scanning
3m 30s
Dependency Scanning
Container Scanning - Trivy
3s
Container Scanning - Trivy
DAST - OWASP ZAP Baseline
20s
DAST - OWASP ZAP Baseline
Security Dashboard
6s
Security Dashboard
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 8 warnings
Container Scanning - Trivy
Unable to resolve action `aquasecurity/trivy-action@0.30.0`, unable to find version `0.30.0`
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
Dependency Scanning
Process completed with exit code 1.
Dependency Scanning
8 critical dependencies finding(s) block merge.
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST - Semgrep OWASP Top 10
198 high-severity semgrep finding(s) require security-team review.
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
38 high-severity dependencies finding(s) require security-team review.
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Dashboard
236 high-severity security finding(s) require security-team review.

Artifacts

Produced during runtime
Name Size Digest
security-dashboard
8.27 KB
sha256:af41a710e24bd35611ce86716726a086f85cd3ea50c30a0c6c6c3bb3f2dfa09e
security-dependency-scan
21.7 KB
sha256:083d2e74e8f5d41752dff6e48f977fcdb0ea282a53830fccc4371fe23692605a
security-sast-semgrep
148 KB
sha256:6d7e9419bc7171d9e360e95a0f736c03364963740fb8783d60db3767e8578868