Skip to content

Security Pipeline

Security Pipeline #10

Triggered via schedule September 6, 2026 07:30
Status Success
Total duration 2m 44s
Artifacts 3

security-pipeline.yml

on: schedule
Secret Scan (gitleaks)
15s
Secret Scan (gitleaks)
SAST (semgrep)
1m 8s
SAST (semgrep)
SCA + IaC (trivy)
58s
SCA + IaC (trivy)
SBOM (syft)
32s
SBOM (syft)
Security Report Digest
1m 30s
Security Report Digest
Fit to window
Zoom out
Zoom in

Annotations

8 warnings
Secret Scan (gitleaks)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SBOM (syft)
Unexpected input(s) 'upload-artifact-name', valid inputs are ['path', 'file', 'image', 'registry-username', 'registry-password', 'format', 'github-token', 'artifact-name', 'output-file', 'syft-version', 'dependency-snapshot', 'upload-artifact', 'upload-artifact-retention', 'upload-release-assets', 'config']
SCA + IaC (trivy)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SCA + IaC (trivy)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST (semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST (semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Security Report Digest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
sbom-cyclonedx
76 KB
sha256:3711ab4177502ef52319816bf9055ece715933fe3c6e9163dabcb0e8f90fdc46
security-report-digest
5.91 KB
sha256:e289d98b6f7984b7260219a0256e9089f847e5207ee19fd4925ba2989c4f290c
wata-board-sbom.cyclonedx.json
76.1 KB
sha256:66ccd82336ce4b46edfea314ecd68357b597e1f9fe0ee430f5286527ed9fa761