Skip to content
Security Automation

feat(#1004): implement XSS prevention with Content Security Policy #944

Sign in to view logs

feat(#1004): implement XSS prevention with Content Security Policy

feat(#1004): implement XSS prevention with Content Security Policy #944

Triggered via pull request August 30, 2026 14:07
@agenes01agenes01
synchronize #1051
agenes01:feat/issue-1004-xss-csp-prevention
Status Failure
Total duration 4m 7s
Artifacts 4

security-scan.yml

on: pull_request
SAST - Semgrep OWASP Top 10
1m 35s
SAST - Semgrep OWASP Top 10
Dependency Scanning
3m 32s
Dependency Scanning
Container Scanning - Trivy
3s
Container Scanning - Trivy
DAST - OWASP ZAP Baseline
3m 11s
DAST - OWASP ZAP Baseline
Security Dashboard
10s
Security Dashboard
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 8 warnings
Container Scanning - Trivy
Unable to resolve action `aquasecurity/trivy-action@0.30.0`, unable to find version `0.30.0`
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
Dependency Scanning
Process completed with exit code 1.
Dependency Scanning
8 critical dependencies finding(s) block merge.
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST - Semgrep OWASP Top 10
201 high-severity semgrep finding(s) require security-team review.
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
34 high-severity dependencies finding(s) require security-team review.
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Dashboard
235 high-severity security finding(s) require security-team review.

Artifacts

Produced during runtime
Name Size Digest
security-dashboard
8.25 KB
sha256:d9efccc704f941153dd85f7b58e14896b4d73fa27a69cbba2f3b8df42e4187ca
security-dast-zap
277 Bytes
sha256:4c5f373d7e8fed2a66988aba676912e2cdae93f6ac9732f81fc3a3bb9f2f5398
security-dependency-scan
21.7 KB
sha256:2fe90bd5429d78de1ce1b7d697ed0c7b775ea127adb97b48942b60f75a10fddf
security-sast-semgrep
147 KB
sha256:a6095f1e9d5941824196ebc3e2d9fc2d3b07c4750168305a303e77f3acbc596d