fix: separate release workflows for clean responsibility separation #31
fgogollisecurity-code.yml
on: pull_request
Configuration
/
Get Configuration
12s
TruffleHog (Secrets Scan)
16s
Dependency Review
7s
Bandit (Security Scan)
/
bandit Security Scan
52s
Safety (Dependency Scan)
/
safety Security Scan
44s
Semgrep (Static Analysis)
/
semgrep Security Scan
1m 10s
Trivy (Filesystem Scan)
/
trivy-fs Security Scan
29s
CodeQL Analysis
/
security-scan
Annotations
1 warning
|
Semgrep (Static Analysis) / semgrep Security Scan
Unexpected input(s) 'generateSarif', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']
|