Skip to content

fix(demo): block settings mutations that could send real email or mov… #21

fix(demo): block settings mutations that could send real email or mov…

fix(demo): block settings mutations that could send real email or mov… #21

Triggered via push July 4, 2026 06:22
Status Success
Total duration 1m 52s
Artifacts 2

audit.yml

on: push
OpenSSF Scorecard
20s
OpenSSF Scorecard
SBOM (syft)
15s
SBOM (syft)
Deterministic claims guard
1m 47s
Deterministic claims guard
Fit to window
Zoom out
Zoom in

Annotations

4 warnings
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OpenSSF Scorecard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OpenSSF Scorecard
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Deterministic claims guard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
calnode-sbom.cdx.json
27.1 KB
sha256:15a63841a61a9c6628f0670f3d904c8dcc5f8bd794a00a108c9ef39103c12cac
scorecard-sarif
18.6 KB
sha256:fbdd1df66db14e33132bd0a95f488b7c7e1e28dfa1499b544e716e62e7f0793d