Skip to content
Security Automation

ci(actions): bump docker/setup-buildx-action from 2 to 4 #1048

Sign in to view logs

ci(actions): bump docker/setup-buildx-action from 2 to 4

ci(actions): bump docker/setup-buildx-action from 2 to 4 #1048

Triggered via pull request September 2, 2026 21:14
@dependabotdependabot[bot]
opened #1098
dependabot/github_actions/docker/setup-buildx-action-4
Status Failure
Total duration 4m 19s
Artifacts 3

security-scan.yml

on: pull_request
SAST - Semgrep OWASP Top 10
1m 29s
SAST - Semgrep OWASP Top 10
Dependency Scanning
4m 0s
Dependency Scanning
Container Scanning - Trivy
19s
Container Scanning - Trivy
DAST - OWASP ZAP Baseline
24s
DAST - OWASP ZAP Baseline
Security Dashboard
9s
Security Dashboard
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 9 warnings
Container Scanning - Trivy
Process completed with exit code 1.
DAST - OWASP ZAP Baseline
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
Process completed with exit code 1.
SAST - Semgrep OWASP Top 10
11 critical semgrep finding(s) block merge.
Dependency Scanning
Process completed with exit code 1.
Dependency Scanning
8 critical dependencies finding(s) block merge.
Container Scanning - Trivy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
DAST - OWASP ZAP Baseline
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST - Semgrep OWASP Top 10
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST - Semgrep OWASP Top 10
205 high-severity semgrep finding(s) require security-team review.
Dependency Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Scanning
35 high-severity dependencies finding(s) require security-team review.
Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/download-artifact@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Dashboard
240 high-severity security finding(s) require security-team review.

Artifacts

Produced during runtime
Name Size Digest
security-dashboard
8.56 KB
sha256:fa0ab3a936ab7c5760884ee3fb4f4e3e05405dcd55fd42b93b15db424d2183a4
security-dependency-scan
17.7 KB
sha256:d33476320c43307d0b1b405f6e2063da3d666f973fa7ff57bf26abd7b1998f18
security-sast-semgrep
148 KB
sha256:d37dee99c6f386a275c46fbad41203a189300e53995f41cf282b7f2211f09c92