Skip to content

feat: refactor testing infrastructure to use test containers and fixtures (#976) #1016

feat: refactor testing infrastructure to use test containers and fixtures (#976)

feat: refactor testing infrastructure to use test containers and fixtures (#976) #1016

Triggered via pull request August 31, 2026 14:56
Status Failure
Total duration 19h 28m 14s
Artifacts 3

security-scan.yml

on: pull_request
SAST - Semgrep OWASP Top 10
1m 50s
SAST - Semgrep OWASP Top 10
Dependency Scanning
2m 46s
Dependency Scanning
Container Scanning - Trivy
16s
Container Scanning - Trivy
DAST - OWASP ZAP Baseline
15s
DAST - OWASP ZAP Baseline
Security Dashboard
10s
Security Dashboard
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 9 warnings
Container Scanning - Trivy
Process completed with exit code 1.
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
Dependency Scanning
Process completed with exit code 1.
Dependency Scanning
8 critical dependencies finding(s) block merge.
Container Scanning - Trivy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST - Semgrep OWASP Top 10
203 high-severity semgrep finding(s) require security-team review.
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
33 high-severity dependencies finding(s) require security-team review.
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Dashboard
236 high-severity security finding(s) require security-team review.

Artifacts

Produced during runtime
Name Size Digest
security-dashboard
7.89 KB
sha256:05bcfc13876d61d2581d53d1aed715152307aa65debbc1b20c1df8b316690fee
security-dependency-scan
16.2 KB
sha256:f134285eec3ef0248f323736ad228155983e0c78a8ec591cba750c37c6b9ac22
security-sast-semgrep
146 KB
sha256:e5aa452c2275a106bc4f2514f010f6fdc73ab61452f5f06b457e540224a4602f