PR new #not sure #37
thevillagehackersecurity-pipeline.yml
on: pull_request
Secrets scan (gitleaks)
9s
SAST (Semgrep)
38s
SCA / FS scan (Trivy)
10s
IaC scan (Checkov)
22s
Annotations
2 errors
|
SCA / FS scan (Trivy)
Process completed with exit code 1.
|
|
IaC scan (Checkov):
.github/workflows/security-pipeline.yml#L0
CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
checkov-sarif
Expired
|
596 Bytes |
sha256:72f9c937026536ed9fd681d50cd000d5472b2184c6374b883308e34f00d0b385
|
|
|
gitleaks-results.sarif
Expired
|
6.59 KB |
sha256:07533b0a135cb25d20001780069aa5cc28f44240be22519cf69d47c7ffce8a46
|
|
|
semgrep-sarif
Expired
|
29.1 KB |
sha256:76ce6857e9d05d6611ea8b2b9ec234acb7bbb05a35143dfddbbfbfc7e1e62bc2
|
|