Skip to content
Security Scanning

Merge pull request #57 from JoshuaAFerguson/claude/fix-setup-screen-0… #107

Sign in to view logs

Merge pull request #57 from JoshuaAFerguson/claude/fix-setup-screen-0…

Merge pull request #57 from JoshuaAFerguson/claude/fix-setup-screen-0… #107

Triggered via push November 17, 2025 02:23
@JoshuaAFergusonJoshuaAFerguson
pushed d46bde1
main
Status Failure
Total duration 7m 42s
Artifacts 1

security-scan.yml

on: push
Matrix: CodeQL Analysis
Matrix: Dockerfile Linting
Matrix: Go Dependency Vulnerability Scan
Matrix: Trivy Container Image Scan
npm Dependency Vulnerability Scan
35s
npm Dependency Vulnerability Scan
Secret Scanning with Gitleaks
5s
Secret Scanning with Gitleaks
SAST with Semgrep
40s
SAST with Semgrep
Kubernetes Manifest Security Scan
23s
Kubernetes Manifest Security Scan
Dependency Review
0s
Dependency Review
Security Scan Summary
2s
Security Scan Summary
Fit to window
Zoom out
Zoom in

Annotations

26 errors and 5 warnings
Go Dependency Vulnerability Scan (controller)
Process completed with exit code 1.
Go Dependency Vulnerability Scan (api)
The strategy configuration was canceled because "go-dependency-scan.controller" failed
Go Dependency Vulnerability Scan (api)
The operation was canceled.
Kubernetes Manifest Security Scan
Path does not exist: checkov-k8s-results.sarif
Kubernetes Manifest Security Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Dockerfile Linting (api): api/Dockerfile#L44
DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
Dockerfile Linting (api): api/Dockerfile#L30
DL3059 info: Multiple consecutive `RUN` instructions. Consider consolidation.
Dockerfile Linting (api): api/Dockerfile#L12
DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
Dockerfile Linting (ui)
The strategy configuration was canceled because "docker-lint.api" failed
Dockerfile Linting (ui)
A task was canceled.
Dockerfile Linting (controller)
The strategy configuration was canceled because "docker-lint.api" failed
Dockerfile Linting (controller)
The operation was canceled.
npm Dependency Vulnerability Scan
Process completed with exit code 1.
Trivy Container Image Scan (api)
Process completed with exit code 1.
Trivy Container Image Scan (api)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (api)
Process completed with exit code 1.
SAST with Semgrep
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (ui)
The strategy configuration was canceled because "trivy-container-scan.api" failed
Trivy Container Image Scan (ui)
Process completed with exit code 1.
Trivy Container Image Scan (ui)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (ui)
Process completed with exit code 1.
CodeQL Analysis (javascript)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (controller)
The strategy configuration was canceled because "trivy-container-scan.api" failed
Trivy Container Image Scan (controller)
Process completed with exit code 1.
Trivy Container Image Scan (controller)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
CodeQL Analysis (go)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Go Dependency Vulnerability Scan (controller)
Restore cache failed: Dependencies file is not found in /home/runner/work/streamspace/streamspace. Supported file pattern: go.sum
Go Dependency Vulnerability Scan (api)
Restore cache failed: Dependencies file is not found in /home/runner/work/streamspace/streamspace. Supported file pattern: go.sum
Trivy Container Image Scan (api)
No files were found with the provided path: trivy-api-report.html. No artifacts will be uploaded.
Trivy Container Image Scan (ui)
No files were found with the provided path: trivy-ui-report.html. No artifacts will be uploaded.
Trivy Container Image Scan (controller)
No files were found with the provided path: trivy-controller-report.html. No artifacts will be uploaded.

Artifacts

Produced during runtime
Name Size Digest
gitleaks-results.sarif Expired
6.62 KB
sha256:0c405723254b4dcc6e4c0d65c1f7c07523ae3804658afa892d6c4a0845c774e9