Skip to content
Security

backlog: file #1247 -- a gate install leaves no record, and its mtime actively lies #1353

Sign in to view logs

backlog: file #1247 -- a gate install leaves no record, and its mtime actively lies

backlog: file #1247 -- a gate install leaves no record, and its mtime actively lies #1353

Triggered via pull request August 13, 2026 15:16
@wshallwshallwshallwshall
opened #371
claude/asvs-1247-gate-install-attribution
Status Success
Total duration 2m 0s
Artifacts –

security.yml

on: pull_request
pip-audit (dependency vulnerabilities)
1m 20s
pip-audit (dependency vulnerabilities)
npm-audit (ide dependency vulnerabilities)
17s
npm-audit (ide dependency vulnerabilities)
released-line-audit (latest release's pinned runtime)
released-line-audit (latest release's pinned runtime)
SBOMs (CycloneDX, multi-ecosystem)
SBOMs (CycloneDX, multi-ecosystem)
trivy (container image vulnerabilities)
trivy (container image vulnerabilities)
bandit (Python SAST)
24s
bandit (Python SAST)
gitleaks (secret scan)
17s
gitleaks (secret scan)
semgrep (project SAST rules)
39s
semgrep (project SAST rules)
crypto-inventory (ASVS 11.1.3 discovery gate)
12s
crypto-inventory (ASVS 11.1.3 discovery gate)
forbidden-content (customer/PHI leak guard)
38s
forbidden-content (customer/PHI leak guard)
Fit to window
Zoom out
Zoom in