chore(ci): set up CI/CD pipeline with security and quality gates #4
Nathydresecurity.yml
on: pull_request
Secret Scan (gitleaks)
9s
SAST (semgrep)
45s
SCA (trivy)
27s
Dependency Audit
3m 4s
SBOM (syft)
11s
Security Summary
2s
Annotations
4 errors and 8 warnings
|
Secret Scan (gitleaks)
Process completed with exit code 1.
|
|
Secret Scan (gitleaks)
Secrets detected by gitleaks. See report for details.
|
|
Security Summary
Process completed with exit code 1.
|
|
Security Summary
One or more critical security jobs failed
|
|
Secret Scan (gitleaks)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM (syft)
Unexpected input(s) 'upload-artifact-name', valid inputs are ['path', 'file', 'image', 'registry-username', 'registry-password', 'format', 'github-token', 'artifact-name', 'output-file', 'syft-version', 'dependency-snapshot', 'upload-artifact', 'upload-artifact-retention', 'upload-release-assets', 'config']
|
|
SCA (trivy)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SCA (trivy)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
SAST (semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST (semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Dependency Audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
nepa-sbom.cyclonedx.json
|
131 KB |
sha256:a52d73391b281e4d0864e833ec8185661c908d872a9670c929a0f2b3f2ac9b31
|
|
|
sbom-cyclonedx
|
131 KB |
sha256:008778dad8ced440c10bdda13295865598b98a3dd1589eb784b2981bf1cd287b
|
|