Skip to content
Build, Scan & Test Containers

chore(supply-chain): pin every OFFICIAL_IMAGE to a @sha256: digest #231

Sign in to view logs

chore(supply-chain): pin every OFFICIAL_IMAGE to a @sha256: digest

chore(supply-chain): pin every OFFICIAL_IMAGE to a @sha256: digest #231

Triggered via pull request May 13, 2026 18:23
@eFAILutioneFAILution
opened #151
chore/digest-pin-third-party-images
Status Success
Total duration 3m 40s
Artifacts 9

build-containers.yml

on: pull_request
Resolve image matrix
6s
Resolve image matrix
Matrix: Build Images
Matrix: scan
Test Argus CLI
1m 15s
Test Argus CLI
Container Scan Summary
9s
Container Scan Summary
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Test Argus CLI
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-supply-chain
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-supply-chain
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan scanner-bandit
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-bandit
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan cli
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan cli
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Scan scanner-opengrep
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan scanner-opengrep
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
Container Scan Summary
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
argus-cli-test-results
320 KB
sha256:92be61e1c75a0a15ac9c0a7fa16db0f22415743db112cf3108c49c08bd4536c9
image-cli Expired
216 MB
sha256:64e915a1704445cd2495d2639a5bca52eabf6c8962a9ea8d6fc67f2063e341ef
image-scanner-bandit Expired
26.4 MB
sha256:a5dcccb47f785e275d551926678b1c621c58b9ff67ca4838072a040290e102d3
image-scanner-opengrep Expired
79.3 MB
sha256:5bee5e8f66d5dc484552efd34f0fd06bb59a3636c07b89f1f15d555c1534e6de
image-scanner-supply-chain Expired
30 MB
sha256:b90ba19955a26348936bf352f875ccb542f42b10ad0a1840c48f07d8215970f7
scanner-summary-container-cli
1.24 KB
sha256:979e679de645faabdfa9d8443baceb96ffe0dd534e7836e9fbcb0a9ac322eeb2
scanner-summary-container-scanner-bandit
892 Bytes
sha256:fa19186f5187323af2fea498315aad53ccccb4f80d6ddddabc6518d2577b7b87
scanner-summary-container-scanner-opengrep
1.34 KB
sha256:56cdf9e584cf4171feef752ebc9f8a947dd50b6125b85a5baae498f786ce8d24
scanner-summary-container-scanner-supply-chain
1.03 KB
sha256:29b5b019a55fcb99e183997cf315a8046064a911d5449f20f6a83e08032ee718