Skip to content

chore: add security audit report and demo seed artifact #15

chore: add security audit report and demo seed artifact

chore: add security audit report and demo seed artifact #15

Triggered via push March 31, 2026 10:24
Status Failure
Total duration 1m 17s
Artifacts

ci.yml

on: push
Lint & Static Analysis
19s
Lint & Static Analysis
Load Test (Peak - Nightly)
0s
Load Test (Peak - Nightly)
Security Scan
48s
Security Scan
Dashboard Build & Test
13s
Dashboard Build & Test
Unit Tests
0s
Unit Tests
Integration Tests
Integration Tests
Benchmark Regression
0s
Benchmark Regression
Load Test (Quick)
Load Test (Quick)
Update Benchmark Baseline
0s
Update Benchmark Baseline
Fit to window
Zoom out
Zoom in

Annotations

22 errors and 4 warnings
Dashboard Build & Test
Some specified paths were not resolved, unable to cache dependencies.
Lint & Static Analysis
golangci-lint exit with code 3
Security Scan: api/grpc/analytics.go#L74
undefined: pb.GetCorridorMetricsResponse
Security Scan: api/grpc/analytics.go#L74
undefined: pb.GetCorridorMetricsRequest
Security Scan: api/grpc/analytics.go#L47
undefined: pb.GetTransferStatusDistributionResponse
Security Scan: api/grpc/analytics.go#L47
undefined: pb.GetTransferStatusDistributionRequest
Security Scan: api/grpc/server.go#L93
undefined: pb.UnimplementedAnalyticsServiceServer
Security Scan: api/grpc/server.go#L92
undefined: pb.UnimplementedPaymentLinkServiceServer
Security Scan: api/grpc/server.go#L91
undefined: pb.UnimplementedBankDepositServiceServer
Security Scan: api/grpc/server.go#L90
undefined: pb.UnimplementedDepositServiceServer
Security Scan: api/grpc/server.go#L89
undefined: pb.UnimplementedPortalAuthServiceServer
Security Scan: api/grpc/server.go#L88
undefined: pb.UnimplementedTenantPortalServiceServer
Build: api/grpc/analytics.go#L74
undefined: pb.GetCorridorMetricsResponse
Build: api/grpc/analytics.go#L74
undefined: pb.GetCorridorMetricsRequest
Build: api/grpc/analytics.go#L47
undefined: pb.GetTransferStatusDistributionResponse
Build: api/grpc/analytics.go#L47
undefined: pb.GetTransferStatusDistributionRequest
Build: api/grpc/server.go#L93
undefined: pb.UnimplementedAnalyticsServiceServer
Build: api/grpc/server.go#L92
undefined: pb.UnimplementedPaymentLinkServiceServer
Build: api/grpc/server.go#L91
undefined: pb.UnimplementedBankDepositServiceServer
Build: api/grpc/server.go#L90
undefined: pb.UnimplementedDepositServiceServer
Build: api/grpc/server.go#L89
undefined: pb.UnimplementedPortalAuthServiceServer
Build: api/grpc/server.go#L88
undefined: pb.UnimplementedTenantPortalServiceServer
Dashboard Build & Test
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4, pnpm/action-setup@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Lint & Static Analysis
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-go@v5, actions/setup-node@v4, golangci/golangci-lint-action@v6, pnpm/action-setup@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-go@v5, actions/setup-node@v4, pnpm/action-setup@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/