do not define dynamic errors, use wrapped static errors instead: "errors.New(\"rsa: internal error: inconsistent length\")" (err113)

do not define dynamic errors, use wrapped static errors instead: "errors.New(\"crypto/rsa: key size too small for PSS signature\")" (err113)

do not define dynamic errors, use wrapped static errors instead: "errors.New(\"crypto/rsa: input must be hashed with given hash\")" (err113)

do not define dynamic errors, use wrapped static errors instead: "errors.New(\"rsa: internal error\")" (err113)

do not define dynamic errors, use wrapped static errors instead: "errors.New(who + \" fn panicked\")" (err113)

do not define dynamic errors, use wrapped static errors instead: "errors.New(\"keys must decode to exactly 32 bytes\")" (err113)

do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"invalid key: %v\", err)" (err113)

do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"cannot decode key exponent: %v\", err)" (err113)

do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"cannot decode key modulus: %v\", err)" (err113)

do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"cannot unmarshal public key: %v\", err)" (err113)

Unable to upload "results.sarif" as it is not valid SARIF: - instance.runs[0].tool.driver.rules[5].relationships[0] is not of a type(s) object

Process completed with exit code 127.

go.mod +-----------------------------+-------------------------------------+------+-----------------+---------------+ | PACKAGE | VULNERABILITY ID | CVSS | CURRENT VERSION | FIXED VERSION | +-----------------------------+-------------------------------------+------+-----------------+---------------+ | github.com/cloudflare/circl | https://osv.dev/GHSA-q9hv-hpm4-hj6x | 2.9 | 1.6.1 | 1.6.3 | +-----------------------------+-------------------------------------+------+-----------------+---------------+

Code Scanning could not process the submitted SARIF file: locationFromSarifResult: expected artifact location

User-specified `matrix` input is not an object.

No files were found with the provided path: /home/runner/.ort/ort-results/evaluation-result.json. No artifacts will be uploaded.

Snapshot successfully created at 2026-02-28T22:15:47.455Z

{ "manifests": { "celzero/firestack 1.0.0": { "resolved": { "pkg:golang/github.com/txthinking/runnergroup@v0.0.0-20210608031112-152c7c4432bf": { "package_url": "pkg:golang/github.com/txthinking/runnergroup@v0.0.0-20210608031112-152c7c4432bf", "relationship": "direct", "dependencies": [] }, "pkg:golang/golang.org/x/sys@v0.40.0": { "package_url": "pkg:golang/golang.org/x/sys@v0.40.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/miekg/dns@v1.1.66": { "package_url": "pkg:golang/github.com/miekg/dns@v1.1.66", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/jedisct1/xsecretbox@v0.0.0-20190909160646-b731c21297f9": { "package_url": "pkg:golang/github.com/jedisct1/xsecretbox@v0.0.0-20190909160646-b731c21297f9", "relationship": "direct", "dependencies": [] }, "pkg:golang/golang.org/x/net@v0.49.0": { "package_url": "pkg:golang/golang.org/x/net@v0.49.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/patrickmn/go-cache@v2.1.0+incompatible": { "package_url": "pkg:golang/github.com/patrickmn/go-cache@v2.1.0+incompatible", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/aead/poly1305@v0.0.0-20180717145839-3fee0db0b635": { "package_url": "pkg:golang/github.com/aead/poly1305@v0.0.0-20180717145839-3fee0db0b635", "relationship": "direct", "dependencies": [] }, "pkg:golang/go4.org/unsafe/assume-no-moving-gc@v0.0.0-20231121144256-b99613f794b6": { "package_url": "pkg:golang/go4.org/unsafe/assume-no-moving-gc@v0.0.0-20231121144256-b99613f794b6", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/k-sone/critbitgo@v1.4.0": { "package_url": "pkg:golang/github.com/k-sone/critbitgo@v1.4.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/golang.org/x/crypto@v0.47.0": { "package_url": "pkg:golang/golang.org/x/crypto@v0.47.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/golang.org/x/time@v0.12.0": { "package_url": "pkg:golang/golang.org/x/time@v0.12.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/snawoot/opera-proxy@v1.5.0": { "package_url": "pkg:golang/github.com/snawoot/opera-proxy@v1.5.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/google/btree@v1.1.2": { "package_url": "pkg:golang/github.com/google/btree@v1.1.2", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/cloudflare/odoh-go@v1.0.0": { "package_url": "pkg:golang/github.com/cloudflare/odoh-go@v1.0.0", "relationship": "direct", "dependencies": [] }, "pkg:golang/github.com/snawoot/go-http-digest-auth-client@v1.1.3": { "package_url": "pkg:golang/github.com/snawoot/go-http-digest-auth-client@v1.1.3", "relationship": "direct",

Submitting snapshot...