Skip to content
Security Automation

Merge pull request #872 from Smartdevs17/dependabot/pip/ml-service/to… #1009

Sign in to view logs

Merge pull request #872 from Smartdevs17/dependabot/pip/ml-service/to…

Merge pull request #872 from Smartdevs17/dependabot/pip/ml-service/to… #1009

Triggered via push August 31, 2026 14:38
@Smartdevs17Smartdevs17
pushed fddd558
main
Status Failure
Total duration 19h 45m 7s
Artifacts 3

security-scan.yml

on: push
SAST - Semgrep OWASP Top 10
1m 35s
SAST - Semgrep OWASP Top 10
Dependency Scanning
3m 49s
Dependency Scanning
Container Scanning - Trivy
19s
Container Scanning - Trivy
DAST - OWASP ZAP Baseline
15s
DAST - OWASP ZAP Baseline
Security Dashboard
6s
Security Dashboard
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 9 warnings
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
Container Scanning - Trivy
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
Dependency Scanning
Process completed with exit code 1.
Dependency Scanning
8 critical dependencies finding(s) block merge.
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Container Scanning - Trivy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST - Semgrep OWASP Top 10
201 high-severity semgrep finding(s) require security-team review.
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
33 high-severity dependencies finding(s) require security-team review.
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Dashboard
234 high-severity security finding(s) require security-team review.

Artifacts

Produced during runtime
Name Size Digest
security-dashboard
7.86 KB
sha256:ea8bb05b21583b46e46fe89e09557c5c335b6f0e5a9a6730378a1d64173b64d5
security-dependency-scan
16.2 KB
sha256:f57f1f0b9193e0330001b9f344391251a9100c2a6e54ad1e99aa4f64808cf54a
security-sast-semgrep
146 KB
sha256:182f69481e72f0cb307e3fb8550e61fd2fb102be07af1d3762103c10d5cf492e