Skip to content

ci: harden workflows and pin dependencies for OpenSSF Scorecard #1

ci: harden workflows and pin dependencies for OpenSSF Scorecard

ci: harden workflows and pin dependencies for OpenSSF Scorecard #1

Triggered via pull request August 27, 2026 15:03
Status Failure
Total duration 58s
Artifacts

flow-codeql-analysis.yaml

on: pull_request
Matrix: analyze
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 3 warnings
Analyze (javascript-typescript)
Encountered a fatal error while running "/home/runner/_work/_tool/CodeQL/2.26.4/x64/codeql/codeql database trace-command --use-build-mode --working-dir /home/runner/_work/hiero-cli/hiero-cli /home/runner/_work/_temp/codeql_databases/javascript". Exit code was 2 and error was: A fatal error occurred: Exit status 1 from command: [/home/runner/_work/_tool/CodeQL/2.26.4/x64/codeql/javascript/tools/autobuild.sh]. See the logs for more details.
Analyze (actions)
Code Scanning could not process the submitted SARIF file: CodeQL analyses from advanced configurations cannot be processed when the default setup is enabled
Analyze (javascript-typescript)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Analyze (javascript-typescript)
Failed to upload a SARIF file for the unsuccessful execution. Code scanning status information for the repository may be out of date as a result. Processing errors: CodeQL analyses from advanced configurations cannot be processed when the default setup is enabled
Analyze (actions)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/