Security #123
security.yml
on: schedule
Dependency Audit
13s
CodeQL Analysis
4m 10s
Secrets Scanning
1m 15s
License Compliance
11s
Annotations
4 errors and 24 warnings
|
License Compliance
Process completed with exit code 1.
|
|
Dependency Audit
Process completed with exit code 1.
|
|
Secrets Scanning
Process completed with exit code 183.
|
|
CodeQL Analysis
Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run
|
|
License Compliance
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
License Compliance
The process '/usr/bin/git' failed with exit code 128
|
|
Dependency Audit
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dependency Audit
The process '/usr/bin/git' failed with exit code 128
|
|
Secrets Scanning
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Secrets Scanning
The process '/usr/bin/git' failed with exit code 128
|
|
Secrets Scanning:
Tokeniza.Web3/smart-contracts-legacy/onchain/lib/openzeppelin-contracts/lib/forge-std/test/StdChains.t.sol#L25
Found verified Infura result 🐷🔑
|
|
Secrets Scanning:
Tokeniza.Web3/smart-contracts-legacy/onchain/lib/openzeppelin-contracts/lib/forge-std/test/StdChains.t.sol#L9
Found verified Infura result 🐷🔑
|
|
Secrets Scanning:
Tokeniza.Web3/smart-contracts-legacy/onchain/lib/openzeppelin-contracts/lib/forge-std/src/StdChains.sol#L192
Found verified Infura result 🐷🔑
|
|
Secrets Scanning:
Tokeniza.Web3/smart-contracts-legacy/onchain/lib/openzeppelin-contracts/lib/forge-std/foundry.toml#L6
Found verified Infura result 🐷🔑
|
|
Secrets Scanning:
Tokeniza.Web3/smart-contracts-legacy/onchain/lib/forge-std/src/StdChains.sol#L201
Found verified Infura result 🐷🔑
|
|
Secrets Scanning:
Tokeniza.Web3/smart-contracts-legacy/onchain/lib/forge-std/test/StdChains.t.sol#L43
Found verified Infura result 🐷🔑
|
|
CodeQL Analysis
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, github/codeql-action/analyze@v3, github/codeql-action/autobuild@v3, github/codeql-action/init@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL Analysis
The process '/usr/bin/git' failed with exit code 128
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
Feature flags do not specify a default CLI version. Falling back to the CLI version shipped with the Action. This is 2.25.2.
|
|
CodeQL Analysis
This run of the CodeQL Action does not have permission to access the CodeQL Action API endpoints. As a result, it will not be opted into any experimental features. This could be because the Action is running on a pull request from a fork. If not, please ensure the workflow has at least the 'security-events: read' permission. Details: Code scanning is not enabled for this repository. Please enable code scanning in the repository settings. - https://docs.github.com/rest
|
|
CodeQL Analysis
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
|
|
CodeQL Analysis
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|