Skip to content
🔒 Security Scanning

🔒 Security Scanning #61

Sign in to view logs

🔒 Security Scanning

🔒 Security Scanning #61

Triggered via schedule August 19, 2025 02:37
@mapedersenmapedersen
⁠ 3cb8138
main
Status Failure
Total duration 4m 35s
Artifacts 3

security.yml

on: schedule
🔍 Dependency Scan
1m 27s
🔍 Dependency Scan
🔍 Code Security Analysis
3m 19s
🔍 Code Security Analysis
🔐 Secret Scanning
15s
🔐 Secret Scanning
🐳 Docker Security
4m 24s
🐳 Docker Security
🏗️ Infrastructure Security
3s
🏗️ Infrastructure Security
📊 Security Summary
6s
📊 Security Summary
Fit to window
Zoom out
Zoom in

Annotations

8 errors and 25 warnings
🔍 Dependency Scan
Process completed with exit code 1.
🔍 Code Security Analysis
Path does not exist: semgrep.sarif
🐳 Docker Security
Path does not exist: scout-frontend-results.sarif
🐳 Docker Security
Path does not exist: scout-backend-results.sarif
🐳 Docker Security
Path does not exist: trivy-fs-results.sarif
🐳 Docker Security
Aborting upload: only one run of the codeql/analyze or codeql/upload-sarif actions is allowed per job per tool/category. The easiest fix is to specify a unique value for the `category` input. If .runs[].automationDetails.id is specified in the sarif file, that will take precedence over your configured `category`. Category: (.github/workflows/security.yml:docker-security/) Tool: (Trivy)
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
📊 Security Summary
Unhandled error: HttpError: Resource not accessible by integration
🏗️ Infrastructure Security
No files were found with the provided path: k8s-security-scan.json k8s-issues.json infra-security-summary.md. No artifacts will be uploaded.
🔐 Secret Scanning
🛑 Leaks detected, see job summary for details
🔍 Dependency Scan
No files were found with the provided path: dependency-scan.log npm-audit.json security-summary.md. No artifacts will be uploaded.
🔍 Code Security Analysis
Unexpected input(s) 'publishDeployment', 'generateSarif', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L204
Missing XML comment for publicly visible type or member 'ETagService.CheckIfMatch(string?, string)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L174
Missing XML comment for publicly visible type or member 'ETagService.CheckIfNoneMatch(string?, string)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L152
Missing XML comment for publicly visible type or member 'ETagService.ParseETagHeader(string?)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L147
Missing XML comment for publicly visible type or member 'ETagService.ValidateETag(string?, UserDto)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L135
Missing XML comment for publicly visible type or member 'ETagService.ValidateETag(string?, Guid, DateTime)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L129
Missing XML comment for publicly visible type or member 'ETagService.GenerateCollectionETag(IEnumerable<UserDto>)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L111
Missing XML comment for publicly visible type or member 'ETagService.GenerateCollectionETag(IEnumerable<(Guid Id, DateTime LastModified)>)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L106
Missing XML comment for publicly visible type or member 'ETagService.GenerateETag(UserDto)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/ETagService.cs#L93
Missing XML comment for publicly visible type or member 'ETagService.GenerateETag(Guid, DateTime)'
🔍 Code Security Analysis: backend/ModernAPI.Application/Services/AuthService.cs#L23
Missing XML comment for publicly visible type or member 'AuthService.AuthService(UserManager<User>, IPasswordService, IJwtTokenService, IUnitOfWork, ILogger<AuthService>)'
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest
🐳 Docker Security
Resource not accessible by integration - https://docs.github.com/rest

Artifacts

Produced during runtime
Name Size Digest
comprehensive-security-report Expired
14.3 KB
sha256:c164285a1b20b1251279ce5d00c9c6dc399220fe0a5fc583833e9d73aced16bf
docker-security-results Expired
4.08 KB
sha256:c056fcee924c690989590c3eb878ffab49a4168facaa9de4851eae742a6d6ef7
gitleaks-results.sarif Expired
9.42 KB
sha256:c0b836989a22bcec2da86efc39fb71acac519c27c80cc32cc87c2f8637680989