Merge pull request #328 from Olasunkanmi975/feature/data-retention-po… #6
scarface-dev1ci.yml
on: push
Backend (Node.js)
1m 44s
Helm Chart Validation
9s
Secret scanning
5s
OpenAPI Spec Validation (Spectral)
19s
DAST Security Scan (OWASP ZAP)
1m 27s
Annotations
16 warnings
|
Secret scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Helm Chart Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, azure/setup-helm@v3, azure/setup-kubectl@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Helm Chart Validation
Error while fetching latest Helm release: Error: [@octokit/auth-action] `GITHUB_TOKEN` variable is not set. It must be set on either `env:` or `with:`. See https://github.com/octokit/auth-action.js#createactionauth. Using default version v3.9.0
|
|
OpenAPI Spec Validation (Spectral)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
DAST Security Scan (OWASP ZAP)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, zaproxy/action-baseline@v0.14.0. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Backend (Node.js)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L61
Variable Assigned to Object Injection Sink
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L51
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L46
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L37
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/pool.js#L55
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/pool.js#L54
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/pool.js#L28
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/migrate.js#L109
Found non-literal argument in require
|
|
Backend (Node.js):
backend/src/db/migrate.js#L106
Found existsSync from package "fs" with non literal argument at index 0
|
|
Backend (Node.js):
backend/src/db/migrate.js#L55
Found non-literal argument in require
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
zap-scan-report
Expired
|
21.7 KB |
sha256:366d7098c1fe1723f62b2c4d15237e3ace59fda4be1ed7faa5f05b1aad5d276c
|
|