ci: add ThreatCrush security scan #1
ralyodiothreatcrush-scan.yml
on: pull_request
Scan for credentials and vulnerable patterns
25s
Annotations
11 warnings and 1 notice
|
Scan for credentials and vulnerable patterns
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/github-script@v7, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 6a8723343f4964b0:1 for file packages/agentad/src/exchange.test.ts line 13, but found existing inconsistent fingerprint value threatcrush-generic-secret:packages/agentad/src/exchange.test.ts:13
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of fc14d6c3ae8ea377:1 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 528, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:528
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of a2a890d197cd0e4a:1 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 516, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:516
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 2988bea2b6055367:1 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 499, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:499
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of cc31d593dce61158:4 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 471, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:471
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 3cf2a41360cb7317:1 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 428, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:428
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of cc31d593dce61158:3 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 426, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:426
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of cc31d593dce61158:2 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 410, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:410
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of cc31d593dce61158:1 for file apps/logicsrc-web/contract/logicsrc-web.contract.test.ts line 392, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/logicsrc-web/contract/logicsrc-web.contract.test.ts:392
|
|
Scan for credentials and vulnerable patterns
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Scan for credentials and vulnerable patterns
CLI 0.2.2 predates --format; converting terminal output instead.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
threatcrush-sarif
|
1.14 KB |
sha256:e5b35f610bff51a5d3d02cea6378aa5df2307b51bd14820f62ce3dc97ae9c0f6
|
|