Skip to content

ci: add Trivy security scan workflow #1003

ci: add Trivy security scan workflow

ci: add Trivy security scan workflow #1003

Triggered via pull request April 21, 2026 13:43
Status Success
Total duration 1m 21s
Artifacts

format.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

55 warnings
Format
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505, actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Format: external/ring/src/pkcs8.rs#L65
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/pkcs8.rs#L56
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/arithmetic/limbs512/storage.rs#L45
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/arithmetic/bigint/modulus.rs#L116
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/polyfill/slice/as_chunks_mut.rs#L73
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/polyfill/slice/as_chunks_mut.rs#L67
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/polyfill/slice/as_chunks_mut.rs#L60
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/polyfill/slice/as_chunks_mut.rs#L55
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/polyfill/slice/as_chunks_mut.rs#L18
hiding a lifetime that's elided elsewhere is confusing
Format: external/ring/src/polyfill/slice/as_chunks.rs#L19
hiding a lifetime that's elided elsewhere is confusing
Format
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Format
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Format
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Format
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy + rustfmt
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505, actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Clippy + rustfmt: external/ring/src/pkcs8.rs#L65
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/pkcs8.rs#L56
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/arithmetic/limbs512/storage.rs#L45
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/arithmetic/bigint/modulus.rs#L116
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L73
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L67
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L60
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L55
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L18
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks.rs#L19
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/pkcs8.rs#L65
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/pkcs8.rs#L56
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/arithmetic/limbs512/storage.rs#L45
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/arithmetic/bigint/modulus.rs#L116
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L73
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L67
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L60
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L55
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks_mut.rs#L18
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt: external/ring/src/polyfill/slice/as_chunks.rs#L19
hiding a lifetime that's elided elsewhere is confusing
Clippy + rustfmt
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy + rustfmt
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy + rustfmt
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy + rustfmt
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505, actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Clippy: external/ring/src/pkcs8.rs#L65
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/pkcs8.rs#L56
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/arithmetic/limbs512/storage.rs#L45
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/arithmetic/bigint/modulus.rs#L116
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/polyfill/slice/as_chunks_mut.rs#L73
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/polyfill/slice/as_chunks_mut.rs#L67
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/polyfill/slice/as_chunks_mut.rs#L60
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/polyfill/slice/as_chunks_mut.rs#L55
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/polyfill/slice/as_chunks_mut.rs#L18
hiding a lifetime that's elided elsewhere is confusing
Clippy: external/ring/src/polyfill/slice/as_chunks.rs#L19
hiding a lifetime that's elided elsewhere is confusing
Clippy
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Clippy
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/