fix: add retention-days to security scan artifacts - #64
Merged
Conversation
Reduce artifact retention from default 90 days to 3 days for security-reports and security-summary artifacts. This prevents GitHub Actions storage quota from being exceeded. 912 artifacts were accumulating in storage due to missing retention config.
![amazon-q-developer[bot]](https://avatars.githubusercontent.com/in/1220912?s=60&v=4){kind=small}
There was a problem hiding this comment.
The changes correctly address the GitHub Actions storage quota issue by adding retention-days: 3 to both artifact uploads. The implementation is syntactically correct, properly indented, and follows GitHub Actions best practices. The 3-day retention period is appropriate for temporary security reports. No issues found that would block merge.
You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.
Contributor
🔒 Security Scan ResultsStatus: 🟡 HIGH ISSUES - Review required!Summary
NPM Vulnerabilities
Security Score: N/A/10Please run |
zxkane
added a commit
that referenced
this pull request
Apr 9, 2026
## Summary - Bump version from 1.2.0 to 1.3.0 - Update CHANGELOG.md with all changes since v1.2.0 ### Changes in this release #### Changed - **Upgrade OpenHands from v1.4.0 to v1.6.0** (#65) — 341 upstream commits, SDK v1.15.0, removed custom S3EventService in favor of upstream AwsEventService - **Replace github-workflow skill with autonomous-dev-team** (#66) — multi-agent support for Claude Code, Kiro CLI, and Codex #### Fixed - **Add retention-days to security scan artifacts** (#64) — prevent GitHub Actions storage quota exhaustion #### Security - Fixed 6 npm CVEs: handlebars, fast-xml-parser, minimatch, picomatch, path-to-regexp, brace-expansion (#65) ## Test plan - [x] Build passes (`npm run build`) - [x] All 129 unit tests pass (`npm run test:ts`) - [ ] CI checks pass
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
GitHub Actions storage quota exceeded (0.5 GB used / 0.5 GB included). The
security-scanworkflow was uploading artifacts withoutretention-days, defaulting to 90 days. This resulted in 912 accumulated artifacts.Fix
retention-days: 3to bothsecurity-reportsandsecurity-summaryartifact uploadsImpact