Skip to content

Security Analysis

Security Analysis #3

Triggered via schedule May 4, 2026 01:22
Status Failure
Total duration 3m 27s
Artifacts 2

security.yml

on: schedule
Dependency Security
2m 3s
Dependency Security
Code Quality Analysis
3m 14s
Code Quality Analysis
Smart Contract Security
0s
Smart Contract Security
Security Report
7s
Security Report
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 15 warnings
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
Code Quality Analysis
Process completed with exit code 3.
Dependency Security
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Code Quality Analysis
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, github/codeql-action/analyze@v2, github/codeql-action/autobuild@v2, github/codeql-action/init@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
Code Quality Analysis
Feature flags do not specify a default CLI version. Falling back to the CLI version shipped with the Action. This is 2.20.1.
Code Quality Analysis
This run of the CodeQL Action does not have permission to access Code Scanning API endpoints. As a result, it will not be opted into any experimental features. This could be because the Action is running on a pull request from a fork. If not, please ensure the Action has the 'security-events: write' permission. Details: Resource not accessible by integration
Code Quality Analysis
Resource not accessible by integration
SonarScanner
Running this GitHub Action without SONAR_TOKEN is not recommended
SonarScanner
This action is deprecated and will be removed in a future release. Please use the sonarqube-scan-action action instead. The sonarqube-scan-action is a drop-in replacement for this action.
Security Report
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
npm-audit-results Expired
7.79 KB
sha256:f71e8a3df119dd81735ec3aca09a4f3f8328eb27206b582c3880b8ce67e01563
security-report Expired
629 Bytes
sha256:e81ce556d05e689df893f0c2f4108ddc39fc62b1abdc88be0c649b1177931ecb