build(deps): Bump github/codeql-action/upload-sarif from 3.36.2 to 4.37.3 #590
dependabot[bot]ci-baseline.yml
on: pull_request
Pre-commit hooks
15s
Lockfile format guard
4s
Gitleaks secret scan
5s
Proto lint
4s
Proto codegen drift check
7s
Bazel unit tests
10m 40s
Frontend Tauri-compatibility check
4s
Frontend live-browser smoke (Playwright)
2m 20s
Markdown link check
12s
Go vulnerability scan (govulncheck)
13s
Go security scan (gosec)
1m 15s
Semgrep SAST scan
21s
Annotations
4 errors, 2 warnings, and 1 notice
|
Go vulnerability scan (govulncheck)
pipeline.New calls grpc.clientStream.CloseSend, which eventually calls propagation.Baggage.Extract
|
|
Go vulnerability scan (govulncheck)
pipeline.New calls grpc.clientStream.CloseSend, which eventually calls baggage.Parse
|
|
Go vulnerability scan (govulncheck)
pipeline.New calls grpc.clientStream.CloseSend, which eventually calls baggage.New
|
|
Go vulnerability scan (govulncheck)
webrtc.Negotiator.Negotiate calls webrtc.PeerConnection.SetLocalDescription, which eventually calls dnsmessage.Message.Unpack
|
|
Gitleaks secret scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Pre-commit hooks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🎭 Playwright Run Summary
6 skipped
6 passed (14.5s)
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gateway.sbom.cdx.json
|
78.6 KB |
sha256:5e4c7f7a36615faf6690775f290274d59b6d8d88f36d1ed60e01d87dba320946
|
|
|
gitleaks-results.sarif
|
6.61 KB |
sha256:26bd44145bf98862dacb5d1851108784617f220294ddb5c1abf98048109dabea
|
|