Skip to content

Security Scan

Security Scan #19

Triggered via schedule April 6, 2026 04:38
Status Failure
Total duration 2m 41s
Artifacts 6

security-scan.yml

on: schedule
Secrets Detection
35s
Secrets Detection
Python Dependency Scan
1m 2s
Python Dependency Scan
Node.js Dependency Scan
18s
Node.js Dependency Scan
Python SAST (Bandit)
49s
Python SAST (Bandit)
Python SAST (Semgrep)
2m 21s
Python SAST (Semgrep)
Python Security Linting (Ruff)
39s
Python Security Linting (Ruff)
Frontend SAST (ESLint Security)
38s
Frontend SAST (ESLint Security)
DAST (OWASP ZAP)
27s
DAST (OWASP ZAP)
Generate Security Report
7s
Generate Security Report
Security Gate
2s
Security Gate
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
Python SAST (Bandit)
Unable to upload "bandit-report.json" as it is not valid SARIF: - instance is not allowed to have the additional property "errors" - instance is not allowed to have the additional property "generated_at" - instance is not allowed to have the additional property "metrics" - instance is not allowed to have the additional property "results" - instance requires property "version" - instance requires property "runs"
Python Dependency Scan
Process completed with exit code 5.
Node.js Dependency Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
DAST (OWASP ZAP)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, zaproxy/action-baseline@v0.10.0. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
DAST (OWASP ZAP)
No files were found with the provided path: zap_report.html zap_report.json. No artifacts will be uploaded.
Python Security Linting (Ruff)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Frontend SAST (ESLint Security)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python SAST (Bandit)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python Dependency Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python Dependency Scan
No files were found with the provided path: safety-report.json. No artifacts will be uploaded.
Python SAST (Semgrep)
Unexpected input(s) 'generateSarif', 'generateGitHubSAST', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']
Generate Security Report
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bandit-report Expired
26.1 KB
sha256:6aeb46573ca209b78b338173e5871c726a408d0bd00ed235fdd981241755da50
eslint-security-report Expired
509 KB
sha256:1300829f64560cd7b132884358a7e069633b02ffb34cf20c4b178a9e15293ced
npm-audit-report Expired
181 Bytes
sha256:1c1749eedbb0bbd1467e1722d97eee91b104f33db11360476d0444cb6c1c0f0c
pip-audit-report Expired
3.57 KB
sha256:7425ff4bc03a770c04dcb303e1424de1eea256d4da53e2e62d7d12e504649644
ruff-security-report Expired
166 Bytes
sha256:5e4ab9a548fd8a3d440503d8513623e91620a1411e49d25911d18448285894d0
security-summary
303 Bytes
sha256:a0b818c04145407a4bee23967c88468d147f73030e4007ba8a2ccd269cc8f26b