Merge pull request #772 from ZuLu0890/fix/issue-681-bigint-projection… #12
scarface-dev1ci.yml
on: push
Backend (Node.js)
1m 48s
Helm Chart Validation
9s
Secret scanning
8s
OpenAPI Spec Validation (Spectral)
20s
DAST Security Scan (OWASP ZAP)
1m 14s
Annotations
16 warnings
|
Secret scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Helm Chart Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, azure/setup-helm@v3, azure/setup-kubectl@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Helm Chart Validation
Error while fetching latest Helm release: Error: [@octokit/auth-action] `GITHUB_TOKEN` variable is not set. It must be set on either `env:` or `with:`. See https://github.com/octokit/auth-action.js#createactionauth. Using default version v3.9.0
|
|
OpenAPI Spec Validation (Spectral)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
DAST Security Scan (OWASP ZAP)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, zaproxy/action-baseline@v0.14.0. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Backend (Node.js)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L51
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L46
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/middleware/apiVersion.js#L37
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/pool.js#L113
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/pool.js#L112
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/pool.js#L69
Unsafe Regular Expression
|
|
Backend (Node.js):
backend/src/db/pool.js#L28
Generic Object Injection Sink
|
|
Backend (Node.js):
backend/src/db/migrate.js#L130
Found non-literal argument in require
|
|
Backend (Node.js):
backend/src/db/migrate.js#L127
Found existsSync from package "fs" with non literal argument at index 0
|
|
Backend (Node.js):
backend/src/db/migrate.js#L65
Found non-literal argument in require
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
scarface-dev1~Stellar-IndigoPay~A1B3E8.dockerbuild
|
39.8 KB |
sha256:e85a1fbf4e017af2d4e31f003ec35b3bc77a69bf25f887a375bd5c5090c4ad94
|
|
|
zap-scan-report
|
21.6 KB |
sha256:2e5d135672f0d6f49ef4d6b5c33540ba219f53113bf1af90cbe2f9e4e7627272
|
|