Skip to content
Docker Security Scan

Docker Security Scan #270

Sign in to view logs

Docker Security Scan

Docker Security Scan #270

Triggered via schedule May 11, 2026 08:56
@josecelanojosecelano
⁠ f782b40
main
Status Failure
Total duration 5m 10s
Artifacts 8

docker-security-scan.yml

on: schedule
Matrix: Scan Project-Built Docker Images
Extract Third-Party Docker Images from Source
1m 26s
Extract Third-Party Docker Images from Source
Upload SARIF Results to GitHub Security
23s
Upload SARIF Results to GitHub Security
Matrix: Scan Third-Party Docker Images
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
Scan Third-Party Docker Images (grafana/grafana:13.0.0)
Path does not exist: trivy.sarif
Scan Third-Party Docker Images (grafana/grafana:13.0.0)
Process completed with exit code 1.
Scan Project-Built Docker Images (docker/ssh-server/Dockerfile, docker/ssh-server, ssh-server)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Project-Built Docker Images (docker/backup/Dockerfile, docker/backup, tracker-backup)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Project-Built Docker Images (docker/provisioned-instance/Dockerfile, docker/provisioned-inst...
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Third-Party Docker Images (grafana/grafana:13.0.0)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Third-Party Docker Images (grafana/grafana:13.0.0)
No files were found with the provided path: trivy.sarif. No artifacts will be uploaded.
Scan Third-Party Docker Images (prom/prometheus:v3.11.2)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Third-Party Docker Images (caddy:2.11.2)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Third-Party Docker Images (torrust/tracker:develop)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Third-Party Docker Images (mysql:8.4)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Project-Built Docker Images (docker/deployer/Dockerfile, ., deployer)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
sarif-project-deployer-25660359499
57 KB
sha256:4fd6706858d4f2a44578b2fef3f6e304ff9affe18cdf1c8ae385afccba8902eb
sarif-project-provisioned-instance-25660359499
14.6 KB
sha256:e812613a5c3ff41373e3cea47ef479636c3c6c96ab381ea6c157c4e07e4e20fc
sarif-project-ssh-server-25660359499
604 Bytes
sha256:32dd7fc874ffaf56897c06f2b9e7325d3aa2c93040892178851da456e5c00aad
sarif-project-tracker-backup-25660359499
14.7 KB
sha256:e9cb482325c86c86f941c7a33d7eadf561cbdfc95b7a404f17d5b5320fca203f
sarif-third-party-caddy-2.11.2-25660359499
9.92 KB
sha256:c9937c92e7348021e929e0c05e7d4215b1d0bdc41fa31f67d5215b53cc4f98df
sarif-third-party-mysql-8.4-25660359499
11.3 KB
sha256:c0f999ef52a88d95b220ca7ec812316047e540cdde1cb53ae6472bb6a4fcc83e
sarif-third-party-prom-prometheus-v3.11.2-25660359499
4.4 KB
sha256:20c1372a1a9aec9e92a4c20846febe665014e2501a99b70b332db87ab7f5b304
sarif-third-party-torrust-tracker-develop-25660359499
4.77 KB
sha256:c45496eeba411e1f9152483b82e8b84764c614b1024e22d41c194c8fd6dcb404