Skip to content
Scorecard supply-chain security

ci: root the npm updater at the pnpm workspace root, guard lockfile f… #32

Sign in to view logs

ci: root the npm updater at the pnpm workspace root, guard lockfile f…

ci: root the npm updater at the pnpm workspace root, guard lockfile f… #32

Triggered via push July 30, 2026 01:06
@BinHsuBinHsu
pushed de0c8df
main
Status Success
Total duration 44s
Artifacts 1

scorecard.yml

on: push
Scorecard analysis
41s
Scorecard analysis
Fit to window
Zoom out
Zoom in

Annotations

2 warnings
Scorecard analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scorecard analysis
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Artifacts

Produced during runtime
Name Size Digest
SARIF file Expired
16.6 KB
sha256:d420225dfeff6894064f61cc6afeffdaedae526d8ca781f7321246e9a9543f54