Skip to content

feat: implement structured logging with correlation IDs (#939) #871

feat: implement structured logging with correlation IDs (#939)

feat: implement structured logging with correlation IDs (#939) #871

Triggered via pull request August 27, 2026 14:07
Status Failure
Total duration 8m 39s
Artifacts 4

security-scan.yml

on: pull_request
SAST - Semgrep OWASP Top 10
1m 28s
SAST - Semgrep OWASP Top 10
Dependency Scanning
5m 21s
Dependency Scanning
Container Scanning - Trivy
2s
Container Scanning - Trivy
DAST - OWASP ZAP Baseline
3m 12s
DAST - OWASP ZAP Baseline
Security Dashboard
6s
Security Dashboard
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 8 warnings
Container Scanning - Trivy
Unable to resolve action `aquasecurity/trivy-action@0.30.0`, unable to find version `0.30.0`
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
Dependency Scanning
Process completed with exit code 1.
Dependency Scanning
8 critical dependencies finding(s) block merge.
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST - Semgrep OWASP Top 10
198 high-severity semgrep finding(s) require security-team review.
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
32 high-severity dependencies finding(s) require security-team review.
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Dashboard
230 high-severity security finding(s) require security-team review.

Artifacts

Produced during runtime
Name Size Digest
security-dashboard
8.13 KB
sha256:1e9b4dd7f43bc11680a4eec9e635e748660256adfda8c707a6a3caac87904f66
security-dast-zap
277 Bytes
sha256:80587aea7505c9c807d5b9be704a4c0691c186050ab6fc056b4321aebf0d60c4
security-dependency-scan
21.1 KB
sha256:c14286980f1625bbb65cefd49a860fd358c642cdd797c774f17bec502243166c
security-sast-semgrep
147 KB
sha256:1c215be9d5b5c84fb7c2ee3cf96d421f2fc7f9ec73b22915ca2693553e14476a