release: v9.22.10 #122
asklokeshsecurity-audit.yml
on: push
npm audit (high+)
15s
pip-audit (Python deps, reporting)
56s
gitleaks (secrets, new-findings-blocking)
18s
bun audit (best-effort)
12s
Matrix: sast
Annotations
12 warnings
|
bun audit (best-effort)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
bun audit (best-effort)
bun audit reported vulnerabilities (advisory; the npm audit job is the gate)
|
|
gitleaks (secrets, new-findings-blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
npm audit (high+)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
pip-audit (Python deps, reporting)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
pip-audit (Python deps, reporting)
[test-only] testonly-web-app_requirements-test.txt.json: ecdsa PYSEC-2026-1325
|
|
pip-audit (Python deps, reporting)
[SHIPPED] shipped-web-app_requirements.txt.json: ecdsa PYSEC-2026-1325
|
|
pip-audit (Python deps, reporting)
[SHIPPED] shipped-mcp_requirements.txt.json: chromadb PYSEC-2026-311
|
|
CodeQL SAST (python, critical-blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, github/codeql-action/analyze@f3712979fa5f215279b101dd0a2e3bdfb4353324, github/codeql-action/init@f3712979fa5f215279b101dd0a2e3bdfb4353324. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL SAST (python, critical-blocking)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
CodeQL SAST (javascript-typescript, critical-blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, github/codeql-action/analyze@f3712979fa5f215279b101dd0a2e3bdfb4353324, github/codeql-action/init@f3712979fa5f215279b101dd0a2e3bdfb4353324. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL SAST (javascript-typescript, critical-blocking)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
codeql-sarif-javascript-typescript
|
123 KB |
sha256:2f4354afdc2f779c708e0d56f52664e243dde837c0a28bc865e7b3b3d143ba23
|
|
|
codeql-sarif-python
|
167 KB |
sha256:e33e135840f03ae26895bf05c8c8867fd2614f609d1c5c1f86b9ca0fca195010
|
|
|
gitleaks-report
|
159 Bytes |
sha256:e2593a17c01ed5485103e159f43618feb81776a620c9a92cc23fb82d3dbca7e5
|
|
|
pip-audit-reports
|
4.68 KB |
sha256:60db92b3a50cfabea52b9b7afa5360d1f4317ba1e27900fbb52cd61c0ed017a3
|
|