Skip to content
🔒 Security Scanning

🔒 Security Scanning #55

Sign in to view logs

🔒 Security Scanning

🔒 Security Scanning #55

Triggered via schedule August 14, 2025 02:40
@mapedersenmapedersen
⁠ 3cb8138
main
Status Failure
Total duration 6m 18s
Artifacts 3

security.yml

on: schedule
🔍 Dependency Scan
1m 52s
🔍 Dependency Scan
🔍 Code Security Analysis
3m 5s
🔍 Code Security Analysis
🔐 Secret Scanning
15s
🔐 Secret Scanning
🐳 Docker Security
6m 7s
🐳 Docker Security
🏗️ Infrastructure Security
7s
🏗️ Infrastructure Security
📊 Security Summary
4s
📊 Security Summary
Fit to window
Zoom out
Zoom in

Annotations

8 errors and 25 warnings
🔍 Dependency Scan
Process completed with exit code 1.
🔍 Code Security Analysis
Path does not exist: semgrep.sarif
🐳 Docker Security
Path does not exist: scout-frontend-results.sarif
🐳 Docker Security
Path does not exist: scout-backend-results.sarif
🐳 Docker Security
Path does not exist: trivy-fs-results.sarif
🐳 Docker Security
Aborting upload: only one run of the codeql/analyze or codeql/upload-sarif actions is allowed per job per tool/category. The easiest fix is to specify a unique value for the `category` input. If .runs[].automationDetails.id is specified in the sarif file, that will take precedence over your configured `category`. Category: (.github/workflows/security.yml:docker-security/) Tool: (Trivy)
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
📊 Security Summary
Unhandled error: HttpError: Resource not accessible by integration
🏗️ Infrastructure Security
No files were found with the provided path: k8s-security-scan.json k8s-issues.json infra-security-summary.md. No artifacts will be uploaded.
🔐 Secret Scanning
🛑 Leaks detected, see job summary for details
🔍 Dependency Scan
No files were found with the provided path: dependency-scan.log npm-audit.json security-summary.md. No artifacts will be uploaded.
🔍 Code Security Analysis
Unexpected input(s) 'publishDeployment', 'generateSarif', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L204
Missing XML comment for publicly visible type or member 'ETagService.CheckIfMatch(string?, string)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L174
Missing XML comment for publicly visible type or member 'ETagService.CheckIfNoneMatch(string?, string)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L152
Missing XML comment for publicly visible type or member 'ETagService.ParseETagHeader(string?)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L147
Missing XML comment for publicly visible type or member 'ETagService.ValidateETag(string?, UserDto)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L135
Missing XML comment for publicly visible type or member 'ETagService.ValidateETag(string?, Guid, DateTime)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L129
Missing XML comment for publicly visible type or member 'ETagService.GenerateCollectionETag(IEnumerable<UserDto>)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L111
Missing XML comment for publicly visible type or member 'ETagService.GenerateCollectionETag(IEnumerable<(Guid Id, DateTime LastModified)>)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L106
Missing XML comment for publicly visible type or member 'ETagService.GenerateETag(UserDto)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L93
Missing XML comment for publicly visible type or member 'ETagService.GenerateETag(Guid, DateTime)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/AuthService.cs#L23
Missing XML comment for publicly visible type or member 'AuthService.AuthService(UserManager<User>, IPasswordService, IJwtTokenService, IUnitOfWork, ILogger<AuthService>)'
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest

Artifacts

Produced during runtime
Name Size Digest
comprehensive-security-report Expired
14.4 KB
sha256:4ed4c5bb05059000a7813152cced88934921dd96a11396c27824cfa3d5d5eaa5
docker-security-results Expired
4.08 KB
sha256:4664799b24d9f53f42b3eed6f95ff0557c8abe8437fe26f2c0cb37924df18714
gitleaks-results.sarif Expired
9.44 KB
sha256:c206032d07e6ab5e7459467975d28467f4c9418059086e801b786efea11ebe09