fix(ci): repair security pipeline and comprehensive tests #34
Nathydresecurity-pipeline.yml
on: pull_request
Secret Scan (gitleaks)
24s
SAST (semgrep)
1m 11s
SCA + IaC (trivy)
49s
SBOM (syft)
35s
Security Report Digest
1m 22s
Annotations
3 errors and 8 warnings
|
Secret Scan (gitleaks)
Process completed with exit code 1.
|
|
Secret Scan (gitleaks)
Secrets detected by gitleaks. See report for details.
|
|
SAST (semgrep)
Process completed with exit code 2.
|
|
Secret Scan (gitleaks)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM (syft)
Unexpected input(s) 'upload-artifact-name', valid inputs are ['path', 'file', 'image', 'registry-username', 'registry-password', 'format', 'github-token', 'artifact-name', 'output-file', 'syft-version', 'dependency-snapshot', 'upload-artifact', 'upload-artifact-retention', 'upload-release-assets', 'config']
|
|
SCA + IaC (trivy)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SCA + IaC (trivy)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
SAST (semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST (semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Security Report Digest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sbom-cyclonedx
|
76 KB |
sha256:9788301049af4b9dd7afd9ac86a9e471d7b8b26a5a66197e7e0ecd004ccc7d2d
|
|
|
security-report-digest
|
5.91 KB |
sha256:9400dd50db3236b1870e76aa99a58c44a7c43aec99210014399eb0e7e77250a5
|
|
|
wata-board-sbom.cyclonedx.json
|
76 KB |
sha256:6ed9c30737ef3e5b53c9032b643eb6e13cf0b9e8150f7e543c03819c2b096794
|
|