Skip to content

Analysis

Analysis #810

Triggered via schedule May 16, 2024 23:40
Status Success
Total duration 1m 43s
Artifacts 1

analysis.yml

on: schedule
Scorecards  /  Security Scorecards
47s
Scorecards / Security Scorecards
Sonatype Nancy  /  Sonatype Nancy
23s
Sonatype Nancy / Sonatype Nancy
Semgrep Scan  /  semgrep
19s
Semgrep Scan / semgrep
FOSSA  /  Find license compliance and security issues
29s
FOSSA / Find license compliance and security issues
Dependency Review  /  Scan dependencies for license compliance
20s
Dependency Review / Scan dependencies for license compliance
Trivy  /  Filesystem
32s
Trivy / Filesystem
Trivy  /  Container
0s
Trivy / Container
Matrix: CodeQL
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
Dependency Review / Scan dependencies for license compliance
StepSecurity Harden Runner: DNS resolution for domain pipelinesghubeus2.actions.githubusercontent.com. was blocked. This domain is not in the list of allowed-endpoints.
Scorecards / Security Scorecards
StepSecurity Harden Runner: Reverting agent since allowed endpoint *.blob.core.windows.net could not be resolved
Dependency Review / Scan dependencies for license compliance
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, actions/dependency-review-action@c090f4e553673e6e505ea70d6a95362ee12adb94. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Dependency Review / Scan dependencies for license compliance
Failed to save: reserveCache failed: connect ECONNREFUSED 54.185.253.63:443
Semgrep Scan / semgrep
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Sonatype Nancy / Sonatype Nancy
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
FOSSA / Find license compliance and security issues
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Trivy / Filesystem
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce, github/codeql-action/upload-sarif@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Scorecards / Security Scorecards
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce, github/codeql-action/upload-sarif@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
CodeQL (go) / CodeQL Analysis
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, github/codeql-action/init@f0a12816612c7306b485a22cb164feb43c6df818, github/codeql-action/autobuild@f0a12816612c7306b485a22cb164feb43c6df818, github/codeql-action/analyze@f0a12816612c7306b485a22cb164feb43c6df818. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
CodeQL (go) / CodeQL Analysis
The "paths"/"paths-ignore" fields of the config only have effect for JavaScript, Python, and Ruby
Deprecation notice: v1, v2, and v3 of the artifact actions
The following artifacts were uploaded using a version of actions/upload-artifact that is scheduled for deprecation: "SARIF file". Please update your workflow to use v4 of the artifact actions. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

Artifacts

Produced during runtime
Name Size
SARIF file
88.3 KB