Skip to content
Security

threat-intel: add 1 MCP/AI-relevant OSV-confirmed malicious package(s… #388

Sign in to view logs

threat-intel: add 1 MCP/AI-relevant OSV-confirmed malicious package(s…

threat-intel: add 1 MCP/AI-relevant OSV-confirmed malicious package(s… #388

Triggered via push July 17, 2026 23:17
@brian93512brian93512
pushed 3098a7a
main
Status Success
Total duration 1m 54s
Artifacts 2

security.yml

on: push
Prepare Source Tree
5s
Prepare Source Tree
Go Vulnerability Check
26s
Go Vulnerability Check
GoSec Static Analysis
1m 41s
GoSec Static Analysis
Dependency Review
0s
Dependency Review
ToolTrust Meta-Scan
28s
ToolTrust Meta-Scan
Fit to window
Zoom out
Zoom in

Annotations

5 warnings
Prepare Source Tree
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Go Vulnerability Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
ToolTrust Meta-Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, actions/setup-go@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
GoSec Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, actions/setup-go@v5, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
GoSec Static Analysis
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Artifacts

Produced during runtime
Name Size Digest
meta-scan-report
1.36 KB
sha256:8edc98129e87972a232c540ba0e6afbf66f8d2b2bb8795775e45083d127c2f28
source-tree Expired
9.69 MB
sha256:0c7ea93993228dc9640c6c9e631c4d6b41f8f7f34224cdce3e410a6420f0f6d9