CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/

Trivy Container Scan (api/Dockerfile, stellar-escrow-api)

Process completed with exit code 1.

Trivy Container Scan (frontend/Dockerfile, stellar-escrow-frontend)

The strategy configuration was canceled because "trivy-scan.api_Dockerfile_stellar-es" failed

Trivy Container Scan (indexer/Dockerfile, stellar-escrow-indexer)

The strategy configuration was canceled because "trivy-scan.api_Dockerfile_stellar-es" failed

Trivy Container Scan (client/Dockerfile, stellar-escrow-client)

The strategy configuration was canceled because "trivy-scan.api_Dockerfile_stellar-es" failed

NPM Audit (Node.js Dependencies) (frontend)

Generate SBOM (api/Dockerfile, api-sbom.json)

Generate SBOM (client/Dockerfile, client-sbom.json)

The strategy configuration was canceled because "sbom-generation.api_Dockerfile_api-sbom_j" failed

License Compliance Check

NPM Audit (Node.js Dependencies) (api)

NPM Audit (Node.js Dependencies) (config)

CodeQL Security Analysis (go)

NPM Audit (Node.js Dependencies) (app)

Trivy Filesystem Scan

Process completed with exit code 1.

NPM Audit (Node.js Dependencies) (components)

Snyk Vulnerability & License Scan (client, node)

Docker Compose Security Audit

Process completed with exit code 1.

CodeQL Security Analysis (cpp)

We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/cpp/tools/autobuild.sh". Exit code was 1 and last log line was: cpp/autobuilder: autobuild summary. See the logs for more details.

CodeQL Security Analysis (cpp)

CodeQL Security Analysis (ruby)

Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/codeql database finalize --finalize-dataset --threads=4 --ram=14579 /home/runner/work/_temp/codeql_databases/ruby". Exit code was 32 and last log line was: CodeQL detected code written in JavaScript/TypeScript, Rust, GitHub Actions, Go and Python, but not any written in Ruby. Confirm that there is some source code for Ruby in the project. For more information, review our troubleshooting guide at https://gh.io/troubleshooting-code-scanning/no-source-code-seen-during-build . See the logs for more details.

CodeQL Security Analysis (ruby)

CodeQL Security Analysis (javascript)

Snyk Vulnerability & License Scan (api, node)

NPM Audit (Node.js Dependencies) (client)

CodeQL Security Analysis (csharp)

We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/csharp/tools/autobuild.sh". Exit code was 1 and last log line was: Error: Could not auto-detect a suitable build method. See the logs for more details.

CodeQL Security Analysis (csharp)

CodeQL Security Analysis (java)

We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/java/tools/autobuild.sh". Exit code was 1 and last log line was: ERROR: Could not detect a suitable build command for the source checkout. See the logs for more details.

CodeQL Security Analysis (java)

CodeQL Security Analysis (python)

Cargo Audit (Rust Dependencies)

Process completed with exit code 2.

Security Scan Summary

This request has been automatically failed because it uses a deprecated version of `actions/download-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

CodeQL Security Analysis (typescript)

Trivy Container Scan (api/Dockerfile, stellar-escrow-api)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, github/codeql-action/upload-sarif@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Security Analysis (go)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, github/codeql-action/analyze@v2, github/codeql-action/autobuild@v2, github/codeql-action/init@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Security Analysis (go)

Unable to validate code scanning workflow: DuplicateLanguageInMatrix

CodeQL Security Analysis (go)

1 issue was detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'.

Trivy Filesystem Scan

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/checkout@v4, github/codeql-action/upload-sarif@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Detect Secrets

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Docker Compose Security Audit

CodeQL Security Analysis (cpp)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, github/codeql-action/autobuild@v2, github/codeql-action/init@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Security Analysis (cpp)

Cache not found for keys: codeql-trap-1-2.25.1-cpp-945b59e6183cc499a951becd3d314b9b48dcedd7, codeql-trap-1-2.25.1-cpp-

CodeQL Security Analysis (cpp)

Unable to validate code scanning workflow: DuplicateLanguageInMatrix

CodeQL Security Analysis (cpp)