Merge pull request #896 from Smartdevs17/dependabot/github_actions/ac… #986
Smartdevs17security-scan.yml
on: push
SAST - Semgrep OWASP Top 10
1m 35s
Dependency Scanning
3m 40s
Container Scanning - Trivy
3m 23s
DAST - OWASP ZAP Baseline
3m 13s
Security Dashboard
9s
Annotations
7 errors and 10 warnings
|
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
|
|
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
|
|
Dependency Scanning
Process completed with exit code 1.
|
|
Dependency Scanning
8 critical dependencies finding(s) block merge.
|
|
Container Scanning - Trivy
Process completed with exit code 1.
|
|
Container Scanning - Trivy
7 critical trivy finding(s) block merge.
|
|
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
|
|
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
SAST - Semgrep OWASP Top 10
201 high-severity semgrep finding(s) require security-team review.
|
|
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dependency Scanning
34 high-severity dependencies finding(s) require security-team review.
|
|
Container Scanning - Trivy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Container Scanning - Trivy
124 high-severity trivy finding(s) require security-team review.
|
|
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Security Dashboard
359 high-severity security finding(s) require security-team review.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
security-container-trivy
|
171 KB |
sha256:ec8f41275aca6c0fd1edd369b12633d1626d6f1af767cf7af454f7854ab43df2
|
|
|
security-dashboard
|
9.44 KB |
sha256:8beec1520559d37cd019f5e90570f738b1d123d08dd0297fb1fdea4dba6c29bb
|
|
|
security-dast-zap
|
277 Bytes |
sha256:01542733299fd1542c12156dd727799a5c22fdfd6cc395909b9800eb7de68daf
|
|
|
security-dependency-scan
|
22.2 KB |
sha256:4e14de054a2cc5b15e5e02e5dbcac6a936f38dc5c986a0a3c6e7b5fc886e3428
|
|
|
security-sast-semgrep
|
146 KB |
sha256:41ccd013c699de7b11f9bf821519b2b2467ed54faf7ecc41bdabf459a636bd10
|
|