Skip to content
Security CI/CD

ci(security): add security-focused CI/CD workflow #2

Sign in to view logs

ci(security): add security-focused CI/CD workflow

ci(security): add security-focused CI/CD workflow #2

Triggered via pull request July 17, 2026 10:20
@namann5namann5
synchronize #2039
namann5:ci/security-scan-workflow
Status Failure
Total duration 32s
Artifacts 2

security-ci.yml

on: pull_request
Python Security Linting (Bandit)
11s
Python Security Linting (Bandit)
Route Authentication Check
7s
Route Authentication Check
Debug Mode Default Check
6s
Debug Mode Default Check
Hardcoded Secret Detection
5s
Hardcoded Secret Detection
Environment Config Validation
5s
Environment Config Validation
Dependency Security Audit
28s
Dependency Security Audit
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 8 warnings
Python Security Linting (Bandit)
Process completed with exit code 1.
Python Security Linting (Bandit)
Found 2 HIGH severity security issues
Environment Config Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Environment Config Validation
.env.example configuration issues:
Hardcoded Secret Detection
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Route Authentication Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Route Authentication Check
API routers without authentication dependency:
Debug Mode Default Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python Security Linting (Bandit)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Security Audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bandit-report
2.8 KB
sha256:7c03658ff432b8fc9db19ecc18146f7f60d5021cd03c806990e9a76f0672f720
dep-audit-report
855 Bytes
sha256:29254baa64c0930c3e53379bacbd7b8a5142f93937b4cdf9f1d2482289071ecb