Skip to content

chore(ci): replace secret-scanner.yml with reusable wrapper #65

chore(ci): replace secret-scanner.yml with reusable wrapper

chore(ci): replace secret-scanner.yml with reusable wrapper #65

Triggered via pull request May 26, 2026 16:01
Status Success
Total duration 13h 58m 11s
Artifacts 4

static-analysis-gate.yml

on: pull_request
panic-attack assail
6s
panic-attack assail
Hypatia neurosymbolic scan
30s
Hypatia neurosymbolic scan
Patch Bridge CVE triage
6s
Patch Bridge CVE triage
Deposit findings for gitbot-fleet
10s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

4 warnings and 2 notices
Patch Bridge CVE triage
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
panic-attack assail
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia neurosymbolic scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Deposit findings for gitbot-fleet
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
panic-attack assail
panic-attack binary not available — skipping assail

Artifacts

Produced during runtime
Name Size Digest
bridge-report
218 Bytes
sha256:08fa892809114d54d24d7e8b3f99bf9f0a0e491a932a0d3d23f5d76de7406cca
hypatia-findings
161 Bytes
sha256:5da13cf69360a196fbbf242b9c42d58b2b20a7bbcf251598d27199ce60af1154
panic-attack-findings
171 Bytes
sha256:e5dd55a6ee00e8d764ec1c9d0bd5ef4faa76ee5e5c5a11af4ac9b3883f88bd5c
unified-findings
402 Bytes
sha256:7a2d7d41ddbfd09a5e8e593e5531d4d5867fe184358d35c4296bcb959dc79204