chore: bump Trivy 0.69.3→0.70.0, auto-close stale vuln PRs, restrict push to main #36
hsri-pf9security-scan.yml
on: pull_request
Shared Setup
3s
Bandit Security Scan (Full)
16s
Trivy Security Scan (Full)
20s
Annotations
3 warnings
|
Shared Setup
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Bandit Security Scan (Full)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v3, actions/setup-python@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Security Scan (Full)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v3, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bandit-json-63-merge
|
1.19 KB |
sha256:485de94c0f5ae6d35c374d59c184c9aca9db473ab0485b923d542b741e55a275
|
|
|
trivy-json-63-merge
|
562 Bytes |
sha256:a2a80a417911b3c580a4fc9ceee5f63ffb1226838a08d7119d6f73e6d5c5c7d7
|
|