deps(web)(deps): bump uuid from 9.0.1 to 11.1.0 in /src/web #693
security-scan.yml
on: pull_request
Static Code Analysis
16s
Dependency Vulnerability Scan
32s
Secret Detection
16s
Container Vulnerability Scan
21s
Generate Security Report
0s
Annotations
16 errors and 2 warnings
Container Vulnerability Scan
Process completed with exit code 1.
|
Container Vulnerability Scan
Process completed with exit code 1.
|
Container Vulnerability Scan
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
Container Vulnerability Scan
Path does not exist: trivy-backend-results.sarif
|
Container Vulnerability Scan
Path does not exist: trivy-frontend-results.sarif
|
Secret Detection
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
Secret Detection
Path does not exist: gitleaks-report.sarif
|
Static Code Analysis
Process completed with exit code 1.
|
Static Code Analysis
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
Static Code Analysis
Path does not exist: bandit-results.sarif
|
Static Code Analysis
Process completed with exit code 2.
|
Dependency Vulnerability Scan
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
Dependency Vulnerability Scan
Path does not exist: snyk-python.sarif
|
Dependency Vulnerability Scan
Dependencies lock file is not found in /home/runner/work/refunds-wyx7mz/refunds-wyx7mz. Supported file patterns: package-lock.json,npm-shrinkwrap.json,yarn.lock
|
Dependency Vulnerability Scan
Path does not exist: snyk-node.sarif
|
Generate Security Report
This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
|
SonarScanner
This action is deprecated and will be removed in a future release. Please use the sonarqube-scan-action action instead. The sonarqube-scan-action is a drop-in replacement for this action.
|
SonarScanner
Running this GitHub Action without SONAR_TOKEN is not recommended
|
Artifacts
Produced during runtime
Name | Size | |
---|---|---|
gitleaks-results.sarif
|
4.55 KB |
|