Skip to content

fix: validate header names/values and prevent CRLF injection (#1817) #380

fix: validate header names/values and prevent CRLF injection (#1817)

fix: validate header names/values and prevent CRLF injection (#1817) #380

Triggered via pull request August 5, 2026 01:06
Status Success
Total duration 30s
Artifacts 2

security-ci.yml

on: pull_request
Python Security Linting (Bandit)
15s
Python Security Linting (Bandit)
Route Authentication Check
8s
Route Authentication Check
Debug Mode Default Check
6s
Debug Mode Default Check
Hardcoded Secret Detection
9s
Hardcoded Secret Detection
Environment Config Validation
4s
Environment Config Validation
Dependency Security Audit
22s
Dependency Security Audit
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Debug Mode Default Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Route Authentication Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hardcoded Secret Detection
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Environment Config Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python Security Linting (Bandit)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Security Audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bandit-report
2.52 KB
sha256:3ed10f46c1fd1e489adc4cb201c67ba3d18e0da03b5a7d3e7aae31e313caf16d
dep-audit-report
854 Bytes
sha256:0dd7436e57a27d4548eb21b5b5729be32445c68d9dea83df56a9ecb4d0110cc4