Skip to content
Security Audit Pipeline — SAST/DAST/Dependency Scanning

feat: add changelog automation, gitpod config, dev portal, and security headers #58

Sign in to view logs

feat: add changelog automation, gitpod config, dev portal, and security headers

feat: add changelog automation, gitpod config, dev portal, and security headers #58

Triggered via pull request August 28, 2026 13:48
@vjuliaifevjuliaife
opened #782
vjuliaife:feat/issues-757-758-760-761-dev-tooling
Status Failure
Total duration 32m 42s
Artifacts 1

security-audit-pipeline.yml

on: pull_request
SAST — Static Analysis
32s
SAST — Static Analysis
Dependency Vulnerability Scan
4m 8s
Dependency Vulnerability Scan
DAST — Dynamic Application Security Testing
0s
DAST — Dynamic Application Security Testing
Smart Contract Security Analysis
10s
Smart Contract Security Analysis
Aggregate Security Report
7s
Aggregate Security Report
Fit to window
Zoom out
Zoom in

Annotations

4 errors and 8 warnings
Dependency Vulnerability Scan
Path does not exist: security-reports/snyk.sarif
SAST — Static Analysis
Path does not exist: security-reports/semgrep.sarif
SAST — Static Analysis
Process completed with exit code 1.
Aggregate Security Report
Unhandled error: HttpError: Resource not accessible by integration
Dependency Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Vulnerability Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST — Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST — Static Analysis
No files were found with the provided path: security-reports/. No artifacts will be uploaded.
SAST — Static Analysis
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Smart Contract Security Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, dorny/paths-filter@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smart Contract Security Analysis
No files were found with the provided path: security-reports/. No artifacts will be uploaded.
Aggregate Security Report
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/download-artifact@v4, actions/github-script@v7. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
dependency-scan-reports
27.4 KB
sha256:745109f73eeb082fe2b822392a80c5667299831135625e34ab22806030bb1d6d