Skip to content

Merge pull request #247 from streamspace-dev/chore/security-deps-and-… #170

Merge pull request #247 from streamspace-dev/chore/security-deps-and-…

Merge pull request #247 from streamspace-dev/chore/security-deps-and-… #170

Triggered via push April 25, 2026 17:43
Status Failure
Total duration 19m 0s
Artifacts 6
Build & Sign K8s Agent (v2.0)
18m 6s
Build & Sign K8s Agent (v2.0)
Build & Sign API
18m 40s
Build & Sign API
Build & Sign UI
5m 48s
Build & Sign UI
Matrix: Security Scan
Update Helm Chart
0s
Update Helm Chart
Build Summary (v2.0)
3s
Build Summary (v2.0)
Create GitHub Release
Create GitHub Release
Fit to window
Zoom out
Zoom in

Annotations

5 errors and 3 warnings
Security Scan (ui)
Process completed with exit code 1.
Security Scan (k8s-agent)
The strategy configuration was canceled because "security-scan.ui" failed
Security Scan (k8s-agent)
The operation was canceled.
Security Scan (api)
The strategy configuration was canceled because "security-scan.ui" failed
Security Scan (api)
The operation was canceled.
Build & Sign UI
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/build-push-action@v5, docker/login-action@v3, docker/metadata-action@v5, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build & Sign K8s Agent (v2.0)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/build-push-action@v5, docker/login-action@v3, docker/metadata-action@v5, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build & Sign API
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/build-push-action@v5, docker/login-action@v3, docker/metadata-action@v5, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
sbom-api
20.3 KB
sha256:7ebea95acfa18ad0b173475c6b336803d1503ef124c19c6cda9b908f84f470e4
sbom-k8s-agent
6.47 KB
sha256:b5011f7cea1d52cc1952222258e9771d96eb1df78fce71bfd771398bf2b0f320
sbom-ui
21.7 KB
sha256:fd6d984bc3dd7917be2da0b3344239ac418c4be40322791ca47e66a2db592755
streamspace-api-sbom.spdx.json
20.3 KB
sha256:a11d4a31bd75a6434df9f60a614f78b35fa550b60413f93383e4a37ae90a9eb6
streamspace-k8s-agent-sbom.spdx.json
6.5 KB
sha256:76f35724363d88c626e090d72873a14139a4d6cb1850a54ef8fe7dcbc4b0b426
streamspace-ui-sbom.spdx.json
21.7 KB
sha256:1ba2f2d234016489016287fdcee477cc54e2c92ba34baa5561303343b405cdd8