Pin Semgrep CI image by digest and scope security-events to the upload job (CWE-829) #166
Semgrep.yml
on: pull_request
semgrep/ci
37s
Upload SARIF to GitHub Advanced Security Dashboard
20s
Annotations
2 warnings
|
semgrep/ci
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Upload SARIF to GitHub Advanced Security Dashboard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, github/codeql-action/upload-sarif@6c089f53dd51dc3fc7e599c3cb5356453a52ca9e. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
semgrep-sarif
|
335 Bytes |
sha256:e4b3809e4691a52d95bfd0f6d943760f5caf8c3114915eaab76c5a1da8965c02
|
|