Skip to content

Security Scanning

Security Scanning #195

Triggered via schedule July 13, 2026 03:09
Status Success
Total duration 1m 42s
Artifacts

security.yml

on: schedule
govulncheck (Go)
36s
govulncheck (Go)
npm audit (puppeteer-worker)
13s
npm audit (puppeteer-worker)
Trivy FS (merrymaker-go)
27s
Trivy FS (merrymaker-go)
Trivy FS (puppeteer-worker)
21s
Trivy FS (puppeteer-worker)
Matrix: codeql
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 2 warnings
govulncheck (Go)
Process completed with exit code 3.
govulncheck (Go)
http.WriteError calls x509.HostnameError.Error
govulncheck (Go)
cryptoutil.AESGCMEncryptor.Encrypt calls io.ReadFull, which eventually calls x509.Certificate.VerifyHostname
govulncheck (Go)
cryptoutil.AESGCMEncryptor.Encrypt calls io.ReadFull, which eventually calls x509.Certificate.Verify
govulncheck (Go)
workflowtest.HTTPClient.FailJob calls io.ReadAll, which eventually calls textproto.Reader.ReadMIMEHeader
govulncheck (Go)
workflowtest.HTTPClient.DoJSON calls http.Client.Do, which eventually calls tls.Dialer.DialContext
govulncheck (Go)
testutil.SetupTestRedis calls redis.NewClient, which eventually calls tls.DialWithDialer
govulncheck (Go)
http.WriteJSON calls bytes.Buffer.WriteTo, which calls tls.Conn.Write
govulncheck (Go)
cryptoutil.AESGCMEncryptor.Encrypt calls io.ReadFull, which eventually calls tls.Conn.Read
govulncheck (Go)
bootstrap.startServer calls http.Server.ListenAndServe, which eventually calls tls.Conn.HandshakeContext
CodeQL (javascript-typescript)
Failed to save: Unable to reserve cache with key codeql-trap-1-2.26.0-javascript-6dcd5c991636c18a1b992adb090679d99ef70ecc, another job may be creating this cache.
CodeQL (go)
Restore cache failed: Dependencies file is not found in /home/runner/work/mmk-ui-api/mmk-ui-api. Supported file pattern: go.mod