Skip to content

fix(permissions): request dangerous car permissions at runtime #23

fix(permissions): request dangerous car permissions at runtime

fix(permissions): request dangerous car permissions at runtime #23

Triggered via push September 3, 2026 08:27
Status Success
Total duration 1m 17s
Artifacts 2

security.yml

on: push
Permission-drift gate (blocking)
8s
Permission-drift gate (blocking)
Secret scan (blocking)
7s
Secret scan (blocking)
SAST mobile (mobsfscan + semgrep)
47s
SAST mobile (mobsfscan + semgrep)
Dependency scan (OWASP)
1m 13s
Dependency scan (OWASP)
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Secret scan (blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, gitleaks/gitleaks-action@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Permission-drift gate (blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST mobile (mobsfscan + semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST mobile (mobsfscan + semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Dependency scan (OWASP)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency scan (OWASP)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Artifacts

Produced during runtime
Name Size Digest
gitleaks-results.sarif
6.63 KB
sha256:5eea7c320d405267700d218d8f1294ad2266451c5a10d71b76ff52c2fdc43f78
security-report
53.9 KB
sha256:93cb800f999d572b825a4eaa3ca43e7f8c3eb8fec818ef26d7c35d625910a9ef