Skip to content

feat(battery): CP-087 daily digest, advice history and parked notific… #109

feat(battery): CP-087 daily digest, advice history and parked notific…

feat(battery): CP-087 daily digest, advice history and parked notific… #109

Triggered via push September 29, 2026 12:14
Status Success
Total duration 54s
Artifacts 2

security.yml

on: push
Permission-drift gate (blocking)
6s
Permission-drift gate (blocking)
Secret scan (blocking)
10s
Secret scan (blocking)
SAST mobile (mobsfscan + semgrep)
50s
SAST mobile (mobsfscan + semgrep)
Dependency scan (OWASP)
41s
Dependency scan (OWASP)
Fit to window
Zoom out
Zoom in

Annotations

6 warnings and 4 notices
Permission-drift gate (blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Secret scan (blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, gitleaks/gitleaks-action@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency scan (OWASP)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency scan (OWASP)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
SAST mobile (mobsfscan + semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST mobile (mobsfscan + semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Permission-drift gate (blocking)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Secret scan (blocking)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dependency scan (OWASP)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
SAST mobile (mobsfscan + semgrep)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
gitleaks-results.sarif
6.63 KB
sha256:5767123087c21f18813b3e73bf6690400c0072378c9d894ae598b07598a09166
security-report
53.4 KB
sha256:91fbfa2bf543d5b11f81d0e4df0d8a2303742fd94f8db090395dbbc576c3cec3