Add files via upload #46
thevillagehackersecurity-pipeline.yml
on: push
Secrets scan (gitleaks)
9s
SAST (Semgrep)
24s
SCA / FS scan (Trivy)
2s
IaC scan (Checkov)
20s
Annotations
2 errors and 3 warnings
|
SCA / FS scan (Trivy)
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
|
|
IaC scan (Checkov):
.github/workflows/security-pipeline.yml#L0
CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
|
|
Secrets scan (gitleaks)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, gitleaks/gitleaks-action@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
IaC scan (Checkov)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST (Semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
checkov-sarif
|
592 Bytes |
sha256:d19f624d0818a7e2790bdd60d7bd73b421ea476584afa50de9ec5eff8a55aa14
|
|
|
gitleaks-results.sarif
|
6.59 KB |
sha256:5642e27b4d138afae1085696e3a6d4728a709adfba506877f3bffaeabc5e9d49
|
|
|
semgrep-sarif
|
29.1 KB |
sha256:daa6227a4102546dffd90b4bcd945126ba27464c202dedaede2d3dc8978b402f
|
|