security: pin GitHub Actions to commit SHAs (Sapper M1 #3) #23
GoosterhofAnnotations
22 warnings
|
check (8.4)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L144
Escaped Mutant for Mutator "LogicalNot":
@@ @@
{
if (
!$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
+ || $node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L144
Escaped Mutant for Mutator "InstanceOf_":
@@ @@
{
if (
!$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
+ || $node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalOr":
@@ @@
if (
!$node->var instanceof PropertyFetch
|| !$node->var->var instanceof Variable
- || $node->var->var->name !== 'this'
- || !$node->var->name instanceof Identifier
+ || $node->var->var->name !== 'this' && !$node->var->name instanceof Identifier
) {
return false;
}
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalOr":
@@ @@
{
if (
!$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
- || $node->var->var->name !== 'this'
+ || !$node->var->var instanceof Variable && $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
return false;
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalOr":
@@ @@
private function isOnNonDatabaseProperty(MethodCall $node, array $nonDatabaseProperties): bool
{
if (
- !$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
+ !$node->var instanceof PropertyFetch && !$node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalNot":
@@ @@
private function isOnNonDatabaseProperty(MethodCall $node, array $nonDatabaseProperties): bool
{
if (
- !$node->var instanceof PropertyFetch
+ $node->var instanceof PropertyFetch
|| !$node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "InstanceOf_":
@@ @@
private function isOnNonDatabaseProperty(MethodCall $node, array $nonDatabaseProperties): bool
{
if (
- !$node->var instanceof PropertyFetch
+ $node->var instanceof PropertyFetch
|| !$node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L125
Escaped Mutant for Mutator "LogicalAnd":
@@ @@
$count = 0;
$this->walkNodes($method->stmts ?? [], function(Node $node) use (&$count, $nonDatabaseProperties): void {
if (
- $node instanceof MethodCall
- && $node->name instanceof Identifier
+ ($node instanceof MethodCall || $node->name instanceof Identifier)
&& in_array($node->name->toString(), self::WRITE_METHODS, true)
&& !$this->isOnNonDatabaseProperty($node, $nonDatabaseProperties)
) {
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L94
Escaped Mutant for Mutator "LogicalOr":
@@ @@
$executeMethod = $node->getMethod('execute');
- if ($executeMethod === null || $executeMethod->stmts === null) {
+ if ($executeMethod === null && $executeMethod->stmts === null) {
return [];
}
|
|
check (8.4):
src/Rules/EnforceActionTransactionsRule.php#L88
Escaped Mutant for Mutator "LogicalOr":
@@ @@
{
$namespace = $scope->getNamespace();
- if ($namespace === null || !str_starts_with($namespace, 'App\Actions')) {
+ if ($namespace === null && !str_starts_with($namespace, 'App\Actions')) {
return [];
}
|
|
check (8.5)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L144
Escaped Mutant for Mutator "LogicalNot":
@@ @@
{
if (
!$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
+ || $node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L144
Escaped Mutant for Mutator "InstanceOf_":
@@ @@
{
if (
!$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
+ || $node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalOr":
@@ @@
if (
!$node->var instanceof PropertyFetch
|| !$node->var->var instanceof Variable
- || $node->var->var->name !== 'this'
- || !$node->var->name instanceof Identifier
+ || $node->var->var->name !== 'this' && !$node->var->name instanceof Identifier
) {
return false;
}
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalOr":
@@ @@
{
if (
!$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
- || $node->var->var->name !== 'this'
+ || !$node->var->var instanceof Variable && $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
return false;
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalOr":
@@ @@
private function isOnNonDatabaseProperty(MethodCall $node, array $nonDatabaseProperties): bool
{
if (
- !$node->var instanceof PropertyFetch
- || !$node->var->var instanceof Variable
+ !$node->var instanceof PropertyFetch && !$node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
) {
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "LogicalNot":
@@ @@
private function isOnNonDatabaseProperty(MethodCall $node, array $nonDatabaseProperties): bool
{
if (
- !$node->var instanceof PropertyFetch
+ $node->var instanceof PropertyFetch
|| !$node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L143
Escaped Mutant for Mutator "InstanceOf_":
@@ @@
private function isOnNonDatabaseProperty(MethodCall $node, array $nonDatabaseProperties): bool
{
if (
- !$node->var instanceof PropertyFetch
+ $node->var instanceof PropertyFetch
|| !$node->var->var instanceof Variable
|| $node->var->var->name !== 'this'
|| !$node->var->name instanceof Identifier
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L125
Escaped Mutant for Mutator "LogicalAnd":
@@ @@
$count = 0;
$this->walkNodes($method->stmts ?? [], function(Node $node) use (&$count, $nonDatabaseProperties): void {
if (
- $node instanceof MethodCall
- && $node->name instanceof Identifier
+ ($node instanceof MethodCall || $node->name instanceof Identifier)
&& in_array($node->name->toString(), self::WRITE_METHODS, true)
&& !$this->isOnNonDatabaseProperty($node, $nonDatabaseProperties)
) {
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L94
Escaped Mutant for Mutator "LogicalOr":
@@ @@
$executeMethod = $node->getMethod('execute');
- if ($executeMethod === null || $executeMethod->stmts === null) {
+ if ($executeMethod === null && $executeMethod->stmts === null) {
return [];
}
|
|
check (8.5):
src/Rules/EnforceActionTransactionsRule.php#L88
Escaped Mutant for Mutator "LogicalOr":
@@ @@
{
$namespace = $scope->getNamespace();
- if ($namespace === null || !str_starts_with($namespace, 'App\Actions')) {
+ if ($namespace === null && !str_starts_with($namespace, 'App\Actions')) {
return [];
}
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
clover-php-8.4
Expired
|
2.5 KB |
sha256:ecf9605cc79c99484846f0ffedb06f4758d8ba5c3a4435ee7f806a44ce5211f5
|
|
|
clover-php-8.5
Expired
|
2.5 KB |
sha256:ecf9605cc79c99484846f0ffedb06f4758d8ba5c3a4435ee7f806a44ce5211f5
|
|
|
infection-php-8.4
Expired
|
112 KB |
sha256:36d752bb16aed5fd06519ac8d331fcccdee50582f271d55a3190f9996b08404c
|
|
|
infection-php-8.5
Expired
|
112 KB |
sha256:6dcbc3d41250c3d3c1109d46f5b9fd70b1bd2ded815b2e2b4857fe18fa681a7a
|
|