Security Pipeline #10
security-pipeline.yml
on: schedule
Secret Scan (gitleaks)
15s
SAST (semgrep)
1m 8s
SCA + IaC (trivy)
58s
SBOM (syft)
32s
Security Report Digest
1m 30s
Annotations
8 warnings
|
Secret Scan (gitleaks)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM (syft)
Unexpected input(s) 'upload-artifact-name', valid inputs are ['path', 'file', 'image', 'registry-username', 'registry-password', 'format', 'github-token', 'artifact-name', 'output-file', 'syft-version', 'dependency-snapshot', 'upload-artifact', 'upload-artifact-retention', 'upload-release-assets', 'config']
|
|
SCA + IaC (trivy)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SCA + IaC (trivy)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
SAST (semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST (semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Security Report Digest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sbom-cyclonedx
|
76 KB |
sha256:3711ab4177502ef52319816bf9055ece715933fe3c6e9163dabcb0e8f90fdc46
|
|
|
security-report-digest
|
5.91 KB |
sha256:e289d98b6f7984b7260219a0256e9089f847e5207ee19fd4925ba2989c4f290c
|
|
|
wata-board-sbom.cyclonedx.json
|
76.1 KB |
sha256:66ccd82336ce4b46edfea314ecd68357b597e1f9fe0ee430f5286527ed9fa761
|
|