ci: protect claim gate resolution inputs #2864
ruvnetsecurity-scan.yml
on: push
Static Application Security Testing
1m 53s
Dependency Vulnerability Scan
6m 7s
Container Security Scan
9m 56s
Infrastructure Security Scan
52s
Secret Scanning
31s
License Compliance Scan
1m 28s
Security Policy Compliance
7s
Security Report
57s
Annotations
8 errors and 12 warnings
|
Security Policy Compliance
Process completed with exit code 1.
|
|
Secret Scanning
Process completed with exit code 2.
|
|
Static Application Security Testing
Path does not exist: bandit-results.sarif
|
|
Static Application Security Testing
Process completed with exit code 2.
|
|
Dependency Vulnerability Scan
Path does not exist: snyk-results.sarif
|
|
Dependency Vulnerability Scan
Process completed with exit code 1.
|
|
Dependency Vulnerability Scan
Process completed with exit code 2.
|
|
Security Report
Unable to download artifact(s): Unable to download and extract artifact: Artifact download failed after 5 retries.
|
|
Security Policy Compliance
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Secret Scanning
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, gitleaks/gitleaks-action@dcedce43c6f43de0b836d1fe38946645c9c638dc. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Infrastructure Security Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, github/codeql-action/upload-sarif@a2983b8bed1923f44751c5c43237f479442827b3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Infrastructure Security Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
License Compliance Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Static Application Security Testing
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, github/codeql-action/upload-sarif@a2983b8bed1923f44751c5c43237f479442827b3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Static Application Security Testing
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Dependency Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, github/codeql-action/upload-sarif@a2983b8bed1923f44751c5c43237f479442827b3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dependency Vulnerability Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Container Security Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f, github/codeql-action/upload-sarif@a2983b8bed1923f44751c5c43237f479442827b3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Container Security Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Security Report
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gitleaks-results.sarif
|
6.6 KB |
sha256:56cc25d0a70d20d45150048f97ad756cf879c3544b0d8fe094dde8fc303a2cb4
|
|
|
license-report
|
1.8 KB |
sha256:e1a6bbff2ea9a3d7e35c94588934daa3ffa04cda02996c4cb94f83113fffe322
|
|
|
ruvnet~RuView~H75CMU.dockerbuild
|
77.8 KB |
sha256:3a8349eb99a9274be0142c6990aa7d121967dc06d88af16671df56113756841e
|
|
|
security-summary
|
297 Bytes |
sha256:733c8e14c81569e80ceb5a864eb5d93b0054222d468d7ac7066a27fae1094a62
|
|
|
vulnerability-reports
|
3.73 KB |
sha256:0dc27c866f65f645c545b881980557fe5b1294540fa60f0a0eace20db3fbf56c
|
|