Repository navigation
ci: add ThreatCrush security scan #1
ralyodiothreatcrush-scan.yml
on: pull_request
Scan for credentials and vulnerable patterns
29s
Annotations
11 warnings and 1 notice
|
Scan for credentials and vulnerable patterns
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/github-script@v7, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 42af8191de0d96ec:1 for file scripts/verify-migration.js line 19, but found existing inconsistent fingerprint value threatcrush-generic-secret:scripts/verify-migration.js:19
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 9732008455b8eadc:1 for file scripts/setup.js line 24, but found existing inconsistent fingerprint value threatcrush-jwt-token:scripts/setup.js:24
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 49c0cd58e5185526:1 for file scripts/setup.js line 22, but found existing inconsistent fingerprint value threatcrush-jwt-token:scripts/setup.js:22
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 9732008455b8eadc:1 for file scripts/setup-local.js line 64, but found existing inconsistent fingerprint value threatcrush-jwt-token:scripts/setup-local.js:64
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 49c0cd58e5185526:1 for file scripts/setup-local.js line 57, but found existing inconsistent fingerprint value threatcrush-jwt-token:scripts/setup-local.js:57
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 1ec58c6d02641139:1 for file packages/cli/bin/mh.js line 46, but found existing inconsistent fingerprint value threatcrush-database-url:packages/cli/bin/mh.js:46
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 43b85a1d47d48bb6:1 for file apps/web/src/routes/api/secrets/[id]/+server.js line 64, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/web/src/routes/api/secrets/[id]/+server.js:64
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 3db1190f52a00a38:1 for file apps/web/src/routes/api/secrets/[id]/+server.js line 39, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/web/src/routes/api/secrets/[id]/+server.js:39
|
|
Scan for credentials and vulnerable patterns
Calculated fingerprint of 4bb2800ade8127:1 for file apps/web/src/routes/api/secrets/+server.js line 67, but found existing inconsistent fingerprint value threatcrush-generic-secret:apps/web/src/routes/api/secrets/+server.js:67
|
|
Scan for credentials and vulnerable patterns
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Scan for credentials and vulnerable patterns
CLI 0.2.2 predates --format; converting terminal output instead.
|