Add per-workflow issues audit to GitHub Actions review #329
security-scan.yml
on: pull_request
Python Security Scan (Bandit)
17s
NPM Security Audit
11s
Python Dependency Check (Safety)
20s
Django Security Check
9s
SQL Injection Check
6s
XSS Protection Check
6s
CSRF Protection Check
7s
Container Security Scan (Trivy)
23s
Scan for Secrets
7s
Security Scan Summary
3s
Generate Security Report
5s
Annotations
8 errors and 3 warnings
|
Django Security Check
Process completed with exit code 1.
|
|
Python Security Scan (Bandit)
Process completed with exit code 1.
|
|
NPM Security Audit
Process completed with exit code 1.
|
|
Container Security Scan (Trivy)
Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run
|
|
Container Security Scan (Trivy)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
SQL Injection Check
Process completed with exit code 1.
|
|
CSRF Protection Check
Process completed with exit code 1.
|
|
Security Scan Summary
Process completed with exit code 1.
|
|
Python Dependency Check (Safety)
No files were found with the provided path: api/safety-report.json. No artifacts will be uploaded.
|
|
Container Security Scan (Trivy)
Caught an exception while gathering information for telemetry: HttpError: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
Container Security Scan (Trivy)
Caught an exception while gathering information for telemetry: HttpError: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
security-report
Expired
|
651 Bytes |
sha256:3358a36ca71290efa9cfa7491d5d04baf9bc74b9db89e4d9b57f3c69c123f56f
|
|