Skip to content

fix(engine): make container /output dir writable for non-root scanner users #141

fix(engine): make container /output dir writable for non-root scanner users

fix(engine): make container /output dir writable for non-root scanner users #141

Triggered via pull request May 5, 2026 16:46
Status Success
Total duration 3m 39s
Artifacts 9

build-containers.yml

on: pull_request
Matrix: Build Images
Matrix: scan
Container Scan Summary
13s
Container Scan Summary
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Scan scanner-supply-chain
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-supply-chain
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan scanner-bandit
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-bandit
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan scanner-opengrep
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-opengrep
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Test Argus CLI
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan cli
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan cli
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Container Scan Summary
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
argus-cli-test-results
38.1 KB
sha256:ba2fc66379f8d9608082c3418c379d8ffde28bae8465664c7b57db886a3cdfca
image-cli Expired
216 MB
sha256:6d75acf7cd6b57a5583a85f2c2aa002fffbf38441deb17931b75633e9617097a
image-scanner-bandit Expired
26.4 MB
sha256:fe1193483fc45711b187d8973a6844d26ef54d266748163ad9f2f5b06c862fbd
image-scanner-opengrep Expired
79.3 MB
sha256:1081fcc98108b66ba28797ce011de44475dec08f89ba754fca074ab2c7cb95d6
image-scanner-supply-chain Expired
30 MB
sha256:7d662e93ffb909edba348a2e8b2d77954fbb3a9b94dbc5b19f89a28b5cf91dac
scanner-summary-container-cli
1.18 KB
sha256:1c7ae6ea385705effd10555c6d9094606e745d5954b7850c497e505a8c6323fb
scanner-summary-container-scanner-bandit
881 Bytes
sha256:f5a7d7c40e7b164c142eb4a7b1a9933a050b408a44ad03a52b67598fb18f9996
scanner-summary-container-scanner-opengrep
1.38 KB
sha256:1c86b4effce8419ce1bf6c17cd0978c3e4fbf898af7a924f630cf40210b41838
scanner-summary-container-scanner-supply-chain
985 Bytes
sha256:0cce8d5e1e28febc9c8d183d580db9ca538b3689cff6b0ae638bfc928c2e6ce1