Skip to content
Dependency review for pull requests

Bump github/codeql-action from 3 to 4 #610

Sign in to view logs

Bump github/codeql-action from 3 to 4

Bump github/codeql-action from 3 to 4 #610

Triggered via pull request October 8, 2025 13:01
@dependabotdependabot[bot]
opened #1110
dependabot/github_actions/github/codeql-action-4
Status Failure
Total duration 6m 28s
Artifacts 1

dependencies.yml

on: pull_request
dependency-submission
4m 30s
dependency-submission
dependency-review
1m 50s
dependency-review
Fit to window
Zoom out
Zoom in

Annotations

1 error, 10 warnings, and 1 notice
dependency-review
Dependency review detected vulnerable packages.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-build-tools-api has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-build-statistics has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-build-statistics has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-build-common has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-build-common has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-assignment-compiler-plugin-embeddable has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:kotlin-assignment has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/org.jetbrains.kotlin:compose-compiler-gradle-plugin has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/com.sun.activation:javax.activation has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
maven/co.touchlab:sqliter-driver has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
dependency-submission
Submitted dependency-graph-reports/dependency_review_for_pull_requests-dependency-submission.json: The snapshot was accepted, but it is not for the default branch. It will not update dependency results for the repository.

Artifacts

Produced during runtime
Name Size Digest
dependency-graph_dependency_review_for_pull_requests-dependency-submission.json Expired
23.3 KB
sha256:4e3bb5f60f5f21891ab19b2dadc28ea5124d6d871e334f07ea45d783130b878f