fix: validate header names/values and prevent CRLF injection (#1817) #201
SaumyaT-21trivy-scan.yml
on: pull_request
Matrix: build
Synthetic CVE policy gate test
15s
Matrix: trivy-scan
Annotations
1 error and 6 warnings
|
Synthetic CVE policy gate test
Process completed with exit code 1.
|
|
Build frontend image
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8, docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build backend image
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8, docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy scan - frontend
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, github/codeql-action/upload-sarif@47be0dbd5113ab1b79fe2dd3f68bdf7e426cdc87. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy scan - frontend
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy scan - backend
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, github/codeql-action/upload-sarif@47be0dbd5113ab1b79fe2dd3f68bdf7e426cdc87. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy scan - backend
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
secuscan-backend-tar
Expired
|
200 MB |
sha256:5f2edd6b657c1fd8a5b34736770f41aedad037d9784cd9b9cfec1bea053497ca
|
|
|
secuscan-frontend-tar
Expired
|
22.9 MB |
sha256:1a1c4242572d04b249f84c58a84e9cab5b06b89d256a71b0846f048db24cf633
|
|
|
trivy-report-backend
|
91.7 KB |
sha256:6afe2796446a5b8e980adb79cd2dc0315d50f0542cd7d3d0105f75c71fa4564e
|
|
|
trivy-report-frontend
|
30.2 KB |
sha256:74716b9def8b27461c7e528862530a1a346e6414f9a9c64401192db6fc605993
|
|
|
utksh1~SecuScan~8AZKL9.dockerbuild
|
33.8 KB |
sha256:f591719eaf91323a0295f86526c3bd5f310af626d7806a77c10c23fee5345eed
|
|
|
utksh1~SecuScan~XE89PB.dockerbuild
|
41.9 KB |
sha256:f68eb7a085ac96dc8e44fc1e8a500977f81d5d4d4e9cd59e88a23352c471727e
|
|