fix: validate header names/values and prevent CRLF injection (#1817) #192
SaumyaT-21trivy-scan.yml
on: pull_request
Matrix: build
Synthetic CVE policy gate test
21s
Matrix: trivy-scan
Annotations
1 error and 6 warnings
|
Synthetic CVE policy gate test
Process completed with exit code 1.
|
|
Build backend image
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8, docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build frontend image
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8, docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy scan - frontend
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, github/codeql-action/upload-sarif@47be0dbd5113ab1b79fe2dd3f68bdf7e426cdc87. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy scan - frontend
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy scan - backend
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, github/codeql-action/upload-sarif@47be0dbd5113ab1b79fe2dd3f68bdf7e426cdc87. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy scan - backend
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
secuscan-backend-tar
Expired
|
200 MB |
sha256:788d0b59d7e7a942ef18055d2c709f43650e97405857f8c32a46d30bdbcde5f0
|
|
|
secuscan-frontend-tar
Expired
|
22.9 MB |
sha256:5b10eca6b9dd4c7d7b275efbc918f11b219144e5c90f5bfd3d7f3717046b6c3d
|
|
|
trivy-report-backend
|
90.4 KB |
sha256:e050cb380182dbcbc3e6ced0c75ffa379fc0322d39194c5495158f2c0650f9f1
|
|
|
trivy-report-frontend
|
30.1 KB |
sha256:e385da57983aa3a0ab344efca607d0e59535194eb7506cd14b91dc91ce7e5635
|
|
|
utksh1~SecuScan~3UDMCK.dockerbuild
|
48.8 KB |
sha256:0d6a6d1f319c094e7af3b95455f14199ca8f80042930594f342280d04dfd9fa2
|
|
|
utksh1~SecuScan~XNGPBL.dockerbuild
|
35.6 KB |
sha256:997102257beb2aed98491db6759cc31ad695e028860a145449425a4f55a500ee
|
|