Security (Extended) #493
bountyyfisecurity.yml
on: schedule
License & Dependency Check
16s
Secrets Detection
11s
Semgrep SAST
38s
Generate SBOM
2m 38s
Dependency Freshness
5m 18s
Security Pattern Analysis
6s
Supply Chain Security
5s
OpenSSF Scorecard
49s
Binary Security Analysis
8m 11s
Annotations
1 error and 7 warnings
|
Generate SBOM
Resource not accessible by integration - https://docs.github.com/rest
|
|
Secrets Detection
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Secrets Detection
🛑 Leaks detected, see job summary for details
|
|
Generate SBOM
This run of the CodeQL Action does not have permission to access the CodeQL Action API endpoints. This could be because the Action is running on a pull request from a fork. If not, please ensure the workflow has at least the 'security-events: read' permission. Details: Resource not accessible by integration - https://docs.github.com/rest
|
|
Generate SBOM
Resource not accessible by integration - https://docs.github.com/rest
|
|
Generate SBOM
This run of the CodeQL Action does not have permission to access the CodeQL Action API endpoints. This could be because the Action is running on a pull request from a fork. If not, please ensure the workflow has at least the 'security-events: read' permission. Details: Resource not accessible by integration - https://docs.github.com/rest
|
|
Generate SBOM
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
|
Dependency Freshness
42 dependencies are outdated
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
binary-security
|
471 Bytes |
sha256:3f83ba830f02b989c534955caad36dedd0226a7f233db13e7406c633dba59d93
|
|
|
cargo-deny-results
|
23.5 KB |
sha256:c08ebc5ada91bd9813c0cde5e2fa41ef44638138f3bd7683a3380dd0d23eadef
|
|
|
gitleaks-results.sarif
|
8.96 KB |
sha256:70a0d52c8f084709072e70659b3472f758fb79519e79d4c12b9270bf9d60b6a3
|
|
|
outdated-deps
|
955 Bytes |
sha256:59b2e9c8abd664d2feae95e8096a0e30ad17874cd2582a69bc940dac7109af82
|
|
|
security-report
|
2.53 KB |
sha256:e41eace819a3bfa7313e4add06f14754bcf25def3f8b33eccf4e264126e16f84
|
|
|
semgrep-results
|
46.4 KB |
sha256:f114f72a761735c49d0939d74617c3ef61a08fbf925c7a6abd4262bf4344a3ba
|
|
|
supply-chain-report
|
299 Bytes |
sha256:49b6a02dbb44c18b178f44777c58b2fa5188660245465907913499c06746f785
|
|