Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.

CVE-2026-14257 - HIGH severity - brace-expansion through 5.0.7 is vulnerable to denial of service via m ... vulnerability in brace-expansion

CVE-2026-13149 - HIGH severity - brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity vulnerability in brace-expansion

CVE-2026-59892 - HIGH severity - @opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding vulnerability in @opentelemetry/propagator-jaeger

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744, aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355, crazy-max/ghaction-container-scan@4d8e0acba576e46016cbd65b9ecfc604e85e3990. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CVE-2026-59877 - MEDIUM severity - protobufjs: protobufjs: Denial of Service via crafted .proto schema vulnerability in protobufjs