Skip to content
Security CI/CD

fix: re-validate redirect hops and strip credentials on cross-origin redirects in crawler #427

Sign in to view logs

fix: re-validate redirect hops and strip credentials on cross-origin redirects in crawler

fix: re-validate redirect hops and strip credentials on cross-origin redirects in crawler #427

Triggered via pull request August 6, 2026 10:09
@singhanurag0317-bitsinghanurag0317-bit
opened #2468
singhanurag0317-bit:fix/issue-2369-crawler-redirect-ssrf
Status Success
Total duration 33s
Artifacts 2

security-ci.yml

on: pull_request
Python Security Linting (Bandit)
10s
Python Security Linting (Bandit)
Route Authentication Check
7s
Route Authentication Check
Debug Mode Default Check
4s
Debug Mode Default Check
Hardcoded Secret Detection
8s
Hardcoded Secret Detection
Environment Config Validation
5s
Environment Config Validation
Dependency Security Audit
29s
Dependency Security Audit
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Debug Mode Default Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Environment Config Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Route Authentication Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hardcoded Secret Detection
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python Security Linting (Bandit)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Security Audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11d5960a326750d5838078e36cf38b85af677262, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bandit-report
2.52 KB
sha256:cba5427e7e16b49baa215e979b7d2a7f933533f025c3faefffd91aaac48f95ab
dep-audit-report
856 Bytes
sha256:02dd3ba500ce013b06f29fefbf398e05df6087144d1aec3e4335b6c8e2df7b35