Skip to content

CVE Scanning

CVE Scanning #1848

Triggered via schedule February 10, 2026 08:12
Status Failure
Total duration 3m 28s
Artifacts 6

security.yml

on: schedule
Matrix: dockerfile-scan
Matrix: dotnet-modules-scan
Matrix: gradle-modules-scan
Matrix: node-modules-scan
Fit to window
Zoom out
Zoom in

Annotations

8 errors and 14 warnings
web-front-end/react-node-scan
The strategy configuration was canceled because "node-modules-scan.web-front-end_angular" failed
web-front-end/react-node-scan
The operation was canceled.
trade-processor-gradle-scan
The strategy configuration was canceled because "gradle-modules-scan.trade-service" failed
trade-processor-gradle-scan
The operation was canceled.
account-service-gradle-scan
The strategy configuration was canceled because "gradle-modules-scan.trade-service" failed
account-service-gradle-scan
The operation was canceled.
position-service-gradle-scan
The strategy configuration was canceled because "gradle-modules-scan.trade-service" failed
position-service-gradle-scan
The operation was canceled.
people-service-dotnet-scan: people-service/PeopleService.Core/Queries/ValidatePerson.cs#L61
Possible null reference argument for parameter 'employeeId' in 'Task<bool> IDirectoryService.ValidatePerson(string logonId, string employeeId)'.
people-service-dotnet-scan: people-service/PeopleService.Core/Queries/ValidatePerson.cs#L61
Possible null reference argument for parameter 'logonId' in 'Task<bool> IDirectoryService.ValidatePerson(string logonId, string employeeId)'.
people-service-dotnet-scan: people-service/PeopleService.Core/Infrastructure/ServiceCollectionExtensions.cs#L37
Possible null reference argument for parameter 'path' in 'List<Person>? JsonFileReader.ReadJsonFile(string path)'.
people-service-dotnet-scan: people-service/PeopleService.Core/Infrastructure/ServiceCollectionExtensions.cs#L33
Converting null literal or possible null value to non-nullable type.
people-service-dotnet-scan: people-service/PeopleService.Core/DirectoryService/Person.cs#L16
Non-nullable property 'PhotoUrl' must contain a non-null value when exiting constructor. Consider adding the 'required' modifier or declaring the property as nullable.
people-service-dotnet-scan: people-service/PeopleService.Core/DirectoryService/Person.cs#L15
Non-nullable property 'Department' must contain a non-null value when exiting constructor. Consider adding the 'required' modifier or declaring the property as nullable.
people-service-dotnet-scan: people-service/PeopleService.Core/DirectoryService/Person.cs#L14
Non-nullable property 'EmployeeId' must contain a non-null value when exiting constructor. Consider adding the 'required' modifier or declaring the property as nullable.
people-service-dotnet-scan: people-service/PeopleService.Core/DirectoryService/Person.cs#L13
Non-nullable property 'Email' must contain a non-null value when exiting constructor. Consider adding the 'required' modifier or declaring the property as nullable.
people-service-dotnet-scan: people-service/PeopleService.Core/DirectoryService/Person.cs#L12
Non-nullable property 'FullName' must contain a non-null value when exiting constructor. Consider adding the 'required' modifier or declaring the property as nullable.
people-service-dotnet-scan: people-service/PeopleService.Core/DirectoryService/Person.cs#L11
Non-nullable property 'LogonId' must contain a non-null value when exiting constructor. Consider adding the 'required' modifier or declaring the property as nullable.
web-front-end/react-node-scan
No files were found with the provided path: /home/runner/work/traderX/traderX/web-front-end/react-reports. No artifacts will be uploaded.
trade-processor-gradle-scan
No files were found with the provided path: /home/runner/work/traderX/traderX/trade-processor-reports. No artifacts will be uploaded.
account-service-gradle-scan
No files were found with the provided path: /home/runner/work/traderX/traderX/account-service-reports. No artifacts will be uploaded.
position-service-gradle-scan
No files were found with the provided path: /home/runner/work/traderX/traderX/position-service-reports. No artifacts will be uploaded.

Artifacts

Produced during runtime
Name Size Digest
Depcheck report
335 KB
sha256:db36f6288a10a00973ce46784c6c03c965036530e180614092c00bff7abc6a5e
Depcheck report dotnet-modules-scan
57.3 KB
sha256:109986327696601d5fb55a8bd877b33e9ef45f81178d433d360e653604145b5b
Depcheck report gradle-modules-scan database
42.4 KB
sha256:1aba6ec9e7a4b6aad8e87af28ea6cf3b07a66dc4857c4877b5cc0963189e8f5e
Depcheck report gradle-modules-scan trade-service
81.3 KB
sha256:9942f983bbfa00cf0807682d507be118e67dc7a4eff16060dd94a9d7db750e79
Depcheck report reference-data
558 KB
sha256:a6f7531556a35cd9c76b36e2836a9542741cc705bc17c7882e22f72faea4eac7
Depcheck report trade-feed
175 KB
sha256:2da0ef7e99074aa1a2d18c63c34c4dc6546a32c7dd1372aad673c6c64d55f89c