Skip to content

feat(audit): defensive redaction pass on log + manifest writes #225

feat(audit): defensive redaction pass on log + manifest writes

feat(audit): defensive redaction pass on log + manifest writes #225

Triggered via pull request May 13, 2026 14:12
Status Success
Total duration 3m 28s
Artifacts 9

build-containers.yml

on: pull_request
Resolve image matrix
6s
Resolve image matrix
Matrix: Build Images
Matrix: scan
Container Scan Summary
9s
Container Scan Summary
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Scan scanner-opengrep
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-opengrep
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan scanner-supply-chain
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-supply-chain
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Test Argus CLI
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-bandit
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-bandit
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan cli
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan cli
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Container Scan Summary
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
argus-cli-test-results
319 KB
sha256:247444683a34928c9f250e70840832f4bf68118c38387b7eea31ed7c525bc445
image-cli Expired
216 MB
sha256:4bccc0612c5f74f020e7f7d760eb3296cec7bcafcc91070e3d571899564c76ee
image-scanner-bandit Expired
26.4 MB
sha256:0447c0d1c55d0560e0d23b124599affc9d9693d6934e0f56708c420fcec37ae2
image-scanner-opengrep Expired
79.4 MB
sha256:d1a7af58ef71180ae3f9f1d6447e33f79ca3805ffc8927ef9acdb093ea9329c2
image-scanner-supply-chain Expired
30 MB
sha256:f883fd86efc2c859e3b7948deeb163362973bac0ab7838e1604c038ff480cfba
scanner-summary-container-cli
1.25 KB
sha256:37975ee194c9995d7e7fc408e2a8c0d5e2427bdef603ce7c206dc0287fd6dec0
scanner-summary-container-scanner-bandit
895 Bytes
sha256:311b76edc747aaf358f9209b6a3fce3691086912df7191e8d375912d21f27c02
scanner-summary-container-scanner-opengrep
1.34 KB
sha256:0a01b07011bb3e43bd47c90324e70030e8e7657e53ac135694c3cfec384e4b14
scanner-summary-container-scanner-supply-chain
1.03 KB
sha256:7952e52c1bca435f2a23decc885d0dc2339363f1b5b7f5e0a4c3377ecdfc1b65