Skip to content

Audit

Audit #28

Triggered via schedule July 13, 2026 09:48
Status Failure
Total duration 48s
Artifacts 2

audit.yml

on: schedule
OpenSSF Scorecard
29s
OpenSSF Scorecard
SBOM (syft)
18s
SBOM (syft)
Deterministic claims guard
45s
Deterministic claims guard
Fit to window
Zoom out
Zoom in

Annotations

5 errors and 4 warnings
Deterministic claims guard
Process completed with exit code 3.
Deterministic claims guard
mailer.SMTP.Send calls tls.Dialer.DialContext
Deterministic claims guard
handler.Handler.UploadBrandingLogo calls png.Encoder.Encode, which eventually calls tls.Conn.Write
Deterministic claims guard
handler.Handler.UploadBrandingLogo calls bytes.Buffer.ReadFrom, which calls tls.Conn.Read
Deterministic claims guard
calnode.main calls http.Server.ListenAndServe, which eventually calls tls.Conn.HandshakeContext
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OpenSSF Scorecard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OpenSSF Scorecard
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Deterministic claims guard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
calnode-sbom.cdx.json
27.7 KB
sha256:89d50fd54dcf8390d9bef16ea8da050bd15b47e2d0fc0d3a7aa86791c4704698
scorecard-sarif
18.9 KB
sha256:a62a88e4b50d0684d96d8bf87004fd25bae7c3dd062a6257a18b306ff8b1678a