CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/

Trivy Filesystem Scan

Process completed with exit code 1.

Generate SBOM (api/Dockerfile, api-sbom.json)

The strategy configuration was canceled because "sbom-generation.client_Dockerfile_client-" failed

Generate SBOM (client/Dockerfile, client-sbom.json)

This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

Trivy Container Scan (api/Dockerfile, stellar-escrow-api)

The strategy configuration was canceled because "trivy-scan.client_Dockerfile_stellar" failed

Trivy Container Scan (client/Dockerfile, stellar-escrow-client)

Path does not exist: stellar-escrow-client-trivy.sarif

Trivy Container Scan (client/Dockerfile, stellar-escrow-client)

Process completed with exit code 1.

Trivy Container Scan (frontend/Dockerfile, stellar-escrow-frontend)

The strategy configuration was canceled because "trivy-scan.client_Dockerfile_stellar" failed

Trivy Container Scan (indexer/Dockerfile, stellar-escrow-indexer)

The strategy configuration was canceled because "trivy-scan.client_Dockerfile_stellar" failed

Snyk Vulnerability & License Scan (api, node)

CodeQL Security Analysis (python)

Snyk Vulnerability & License Scan (contract, rust)

CodeQL Security Analysis (csharp)

We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.26.0/x64/codeql/csharp/tools/autobuild.sh". Exit code was 1 and last log line was: Error: Could not auto-detect a suitable build method. See the logs for more details.

CodeQL Security Analysis (csharp)

CodeQL Security Analysis (java)

We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.26.0/x64/codeql/java/tools/autobuild.sh". Exit code was 1 and last log line was: ERROR: Could not detect a suitable build command for the source checkout. See the logs for more details.

CodeQL Security Analysis (java)

Snyk Vulnerability & License Scan (client, node)

NPM Audit (Node.js Dependencies) (api)

Cargo Audit (Rust Dependencies)

Process completed with exit code 2.

NPM Audit (Node.js Dependencies) (components)

NPM Audit (Node.js Dependencies) (client)

License Compliance Check

Docker Compose Security Audit

Process completed with exit code 1.

NPM Audit (Node.js Dependencies) (app)

NPM Audit (Node.js Dependencies) (frontend)

NPM Audit (Node.js Dependencies) (config)

CodeQL Security Analysis (cpp)

We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.26.0/x64/codeql/cpp/tools/autobuild.sh". Exit code was 1 and last log line was: cpp/autobuilder: autobuild summary. See the logs for more details.

CodeQL Security Analysis (cpp)

Security Scan Summary

This request has been automatically failed because it uses a deprecated version of `actions/download-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

CodeQL Security Analysis (ruby)

Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.26.0/x64/codeql/codeql database finalize --finalize-dataset --threads=4 --ram=14575 /home/runner/work/_temp/codeql_databases/ruby". Exit code was 32 and last log line was: CodeQL detected code written in JavaScript/TypeScript, Rust, GitHub Actions, Go and Python, but not any written in Ruby. Confirm that there is some source code for Ruby in the project. For more information, review our troubleshooting guide at https://gh.io/troubleshooting-code-scanning/no-source-code-seen-during-build . See the logs for more details.

CodeQL Security Analysis (ruby)

CodeQL Security Analysis (go)

CodeQL Security Analysis (typescript)

CodeQL Security Analysis (javascript)

Trivy Filesystem Scan

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Trivy Container Scan (client/Dockerfile, stellar-escrow-client)

CodeQL Security Analysis (python)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/analyze@v2, github/codeql-action/autobuild@v2, github/codeql-action/init@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Security Analysis (python)

Unable to validate code scanning workflow: DuplicateLanguageInMatrix

CodeQL Security Analysis (python)

1 issue was detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'.

CodeQL Security Analysis (csharp)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/autobuild@v2, github/codeql-action/init@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Security Analysis (csharp)

Unable to validate code scanning workflow: DuplicateLanguageInMatrix

CodeQL Security Analysis (csharp)

Detect Secrets

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Security Analysis (java)