Skip to content

Fix/verda update code leak n new doctor #99

Fix/verda update code leak n new doctor

Fix/verda update code leak n new doctor #99

Triggered via pull request April 10, 2026 20:31
Status Failure
Total duration 1m 40s
Artifacts

security.yml

on: pull_request
GoSec (via golangci-lint)
1m 28s
GoSec (via golangci-lint)
Gitleaks (secret scanning)
42s
Gitleaks (secret scanning)
Trivy (vulnerability & misconfiguration)
12s
Trivy (vulnerability & misconfiguration)
OSV Scanner (dependency vulnerabilities)
14s
OSV Scanner (dependency vulnerabilities)
All Security Checks Passed
2s
All Security Checks Passed
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 1 warning
GoSec (via golangci-lint)
Process completed with exit code 1.
GoSec (via golangci-lint): internal/verda-cli/cmd/util/versionhint.go#L47
G304: Potential file inclusion via variable (gosec)
All Security Checks Passed
Process completed with exit code 1.
Trivy (vulnerability & misconfiguration)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/