test(ci): AB-037C AC #3 deliberate-drift verification — DO NOT MERGE #335
adamatdevopsci.yml
on: pull_request
Annotations
10 errors and 2 warnings
|
IaC Scan (Checkov):
infra/normalizer/base/normalizer-terraform.yaml#L19
CKV_K8S_22: "Use read-only filesystem for containers where possible"
|
|
IaC Scan (Checkov):
infra/normalizer/base/normalizer-terraform.yaml#L19
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
IaC Scan (Checkov):
infra/normalizer/base/normalizer-terraform.yaml#L19
CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_43: "Image should use digest"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_23: "Minimize the admission of root containers"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_15: "Image Pull Policy should be Always"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_22: "Use read-only filesystem for containers where possible"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
IaC Scan (Checkov):
infra/mlflow/base/mlflow.yaml#L13
CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
|
|
Test Frontend
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Test Backend
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
adamatdevops~forge-works~O91MS4.dockerbuild
|
26 KB |
sha256:53dd26f3efe7d7dd0cbb5cde3ff7040b1a9daf561da83025a8a74f42eda7c1f9
|
|
|
gitleaks-results.sarif
|
6.67 KB |
sha256:27f6b15c4edda27f5bd125adc2d204924b6cc1ef1534754d8f0c0d44178cb3a7
|
|