Skip to content

Update step-security/harden-runner action to v2.9.1 #150

Update step-security/harden-runner action to v2.9.1

Update step-security/harden-runner action to v2.9.1 #150

Triggered via pull request August 6, 2024 03:00
Status Failure
Total duration 3h 26m 5s
Artifacts 1

analysis.yml

on: pull_request
Scorecards  /  Security Scorecards
5m 50s
Scorecards / Security Scorecards
Sonatype Nancy  /  Sonatype Nancy
5m 22s
Sonatype Nancy / Sonatype Nancy
Semgrep Scan  /  semgrep
41s
Semgrep Scan / semgrep
Dependency Review  /  Scan dependencies for license compliance
2h 25m
Dependency Review / Scan dependencies for license compliance
Trivy  /  Filesystem
3h 25m
Trivy / Filesystem
Trivy  /  Container
0s
Trivy / Container
FOSSA  /  Find license compliance and security issues
FOSSA / Find license compliance and security issues
Matrix: CodeQL
Fit to window
Zoom out
Zoom in

Annotations

4 errors and 4 warnings
Scorecards / Security Scorecards
StepSecurity Harden Runner: Reverting agent since allowed endpoint *.blob.core.windows.net could not be resolved
Dependency Review / Scan dependencies for license compliance
The hosted runner: GitHub Actions 17 lost communication with the server. Anything in your workflow that terminates the runner process, starves it for CPU/Memory, or blocks its network access can cause this error.
CodeQL (go) / CodeQL Analysis
The hosted runner: GitHub Actions 10 lost communication with the server. Anything in your workflow that terminates the runner process, starves it for CPU/Memory, or blocks its network access can cause this error.
Trivy / Filesystem
The hosted runner: GitHub Actions 3 lost communication with the server. Anything in your workflow that terminates the runner process, starves it for CPU/Memory, or blocks its network access can cause this error.
Semgrep Scan / semgrep
The following actions uses Node.js version which is deprecated and will be forced to run on node20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Sonatype Nancy / Sonatype Nancy
The following actions uses Node.js version which is deprecated and will be forced to run on node20: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Scorecards / Security Scorecards
The following actions uses Node.js version which is deprecated and will be forced to run on node20: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776, actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce, github/codeql-action/upload-sarif@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Deprecation notice: v1, v2, and v3 of the artifact actions
The following artifacts were uploaded using a version of actions/upload-artifact that is scheduled for deprecation: "SARIF file". Please update your workflow to use v4 of the artifact actions. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

Artifacts

Produced during runtime
Name Size
SARIF file Expired
25.2 KB