Security Scan #19
security-scan.yml
on: schedule
Secrets Detection
35s
Python Dependency Scan
1m 2s
Node.js Dependency Scan
18s
Python SAST (Bandit)
49s
Python SAST (Semgrep)
2m 21s
Python Security Linting (Ruff)
39s
Frontend SAST (ESLint Security)
38s
DAST (OWASP ZAP)
27s
Security Gate
2s
Annotations
2 errors and 10 warnings
|
Python SAST (Bandit)
Unable to upload "bandit-report.json" as it is not valid SARIF:
- instance is not allowed to have the additional property "errors"
- instance is not allowed to have the additional property "generated_at"
- instance is not allowed to have the additional property "metrics"
- instance is not allowed to have the additional property "results"
- instance requires property "version"
- instance requires property "runs"
|
|
Python Dependency Scan
Process completed with exit code 5.
|
|
Node.js Dependency Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
DAST (OWASP ZAP)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, zaproxy/action-baseline@v0.10.0. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
DAST (OWASP ZAP)
No files were found with the provided path: zap_report.html
zap_report.json. No artifacts will be uploaded.
|
|
Python Security Linting (Ruff)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Frontend SAST (ESLint Security)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Python SAST (Bandit)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Python Dependency Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Python Dependency Scan
No files were found with the provided path: safety-report.json. No artifacts will be uploaded.
|
|
Python SAST (Semgrep)
Unexpected input(s) 'generateSarif', 'generateGitHubSAST', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']
|
|
Generate Security Report
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bandit-report
Expired
|
26.1 KB |
sha256:6aeb46573ca209b78b338173e5871c726a408d0bd00ed235fdd981241755da50
|
|
|
eslint-security-report
Expired
|
509 KB |
sha256:1300829f64560cd7b132884358a7e069633b02ffb34cf20c4b178a9e15293ced
|
|
|
npm-audit-report
Expired
|
181 Bytes |
sha256:1c1749eedbb0bbd1467e1722d97eee91b104f33db11360476d0444cb6c1c0f0c
|
|
|
pip-audit-report
Expired
|
3.57 KB |
sha256:7425ff4bc03a770c04dcb303e1424de1eea256d4da53e2e62d7d12e504649644
|
|
|
ruff-security-report
Expired
|
166 Bytes |
sha256:5e4ab9a548fd8a3d440503d8513623e91620a1411e49d25911d18448285894d0
|
|
|
security-summary
|
303 Bytes |
sha256:a0b818c04145407a4bee23967c88468d147f73030e4007ba8a2ccd269cc8f26b
|
|