Skip to content
security

feat(init): scaffolded apps carry their own backend — init, npm start, done #308

Sign in to view logs

feat(init): scaffolded apps carry their own backend — init, npm start, done

feat(init): scaffolded apps carry their own backend — init, npm start, done #308

Triggered via pull request September 2, 2026 18:16
@AbirAbbasAbirAbbas
opened #219
feat/init-bundled-backend
Status Success
Total duration 3m 18s
Artifacts 2

security.yml

on: pull_request
gosec (Go runtime + CLI)
3m 6s
gosec (Go runtime + CLI)
pnpm audit (workspace)
24s
pnpm audit (workspace)
npm audit (docs-site)
22s
npm audit (docs-site)
pip-audit (sdk-py)
22s
pip-audit (sdk-py)
trivy fs scan
35s
trivy fs scan
Matrix: CodeQL
Security Success
4s
Security Success
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
npm audit (docs-site)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
pnpm audit (workspace)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
gosec (Go runtime + CLI)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
gosec-sarif
8.94 KB
sha256:16146178e8b5cfc50e492e17c42296707a7251e3203d1cd0dfd9f39666a6589d
trivy-sarif
5.83 KB
sha256:9317b3ed4250dcfa8a6d4aee8b03df18a0ecc858e3c015cb6822d1dffb38d53e