Security Audit Pipeline — SAST/DAST/Dependency Scanning #75
Smartdevs17security-audit-pipeline.yml
on: schedule
SAST — Static Analysis
48s
Dependency Vulnerability Scan
4m 4s
DAST — Dynamic Application Security Testing
21s
Smart Contract Security Analysis
3m 17s
Aggregate Security Report
6s
Annotations
4 errors and 10 warnings
|
DAST — Dynamic Application Security Testing
Process completed with exit code 1.
|
|
SAST — Static Analysis
Path does not exist: security-reports/semgrep.sarif
|
|
SAST — Static Analysis
Process completed with exit code 1.
|
|
Dependency Vulnerability Scan
Path does not exist: security-reports/snyk.sarif
|
|
DAST — Dynamic Application Security Testing
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
DAST — Dynamic Application Security Testing
No files were found with the provided path: report_html.html
report_md.md
report_json.json. No artifacts will be uploaded.
|
|
SAST — Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST — Static Analysis
No files were found with the provided path: security-reports/. No artifacts will be uploaded.
|
|
SAST — Static Analysis
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Smart Contract Security Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4, dorny/paths-filter@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Smart Contract Security Analysis
'before' field is missing in event payload - changes will be detected from last commit
|
|
Dependency Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dependency Vulnerability Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Aggregate Security Report
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/download-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
dependency-scan-reports
|
27.4 KB |
sha256:c22fd67214ef698808787f49e1a5d087b2763fd89d634d4e8776d58bab7d17c9
|
|
|
smart-contract-reports
|
1.03 KB |
sha256:1578e31bd3046656da905dbd725a373d6440ad9e53c509721698f7a7f745f7d9
|
|