Document security model and harden helper access #1
security.yml
on: push
security-tests
48s
native-helper-security
36s
secret-scanning
21s
Annotations
11 errors and 14 warnings
|
native-helper-security
Process completed with exit code 101.
|
|
security-tests:
src/services/wcPipelineMonitor.ts#L199
'pendingSeekDurations' is never reassigned. Use 'const' instead
|
|
security-tests:
src/services/wcPipelineMonitor.ts#L198
'seekDurations' is never reassigned. Use 'const' instead
|
|
security-tests:
src/services/wcPipelineMonitor.ts#L197
'decodeLats' is never reassigned. Use 'const' instead
|
|
security-tests:
src/services/security/redact.ts#L25
Unnecessary escape character: \-
|
|
security-tests:
src/services/playbackHealthMonitor.ts#L584
Unexpected aliasing of 'this' to local variable
|
|
security-tests:
src/services/layerBuilder/VideoSyncManager.ts#L1816
Unexpected constant condition
|
|
security-tests:
src/services/export/fcpxmlExport.ts#L307
A `require()` style import is forbidden
|
|
security-tests:
src/engine/WebGPUEngine.ts#L170
Unexpected aliasing of 'this' to local variable
|
|
security-tests
'noFreeSpace' is never reassigned. Use 'const' instead
|
|
security-tests:
src/components/panels/ClipPropertiesPanel.tsx#L457
React Hook "useMediaStore" is called conditionally. React Hooks must be called in the exact same order in every component render
|
|
secret-scanning
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, gitleaks/gitleaks-action@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
secret-scanning
🛑 Leaks detected, see job summary for details
|
|
native-helper-security
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
security-tests
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
security-tests:
src/components/common/WelcomeOverlay.tsx#L241
Unexpected any. Specify a different type
|
|
security-tests
Unexpected any. Specify a different type
|
|
security-tests
React Hook useEffect has missing dependencies: 'handleNew' and 'handleOpen'. Either include them or remove the dependency array
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L227
Unexpected any. Specify a different type
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L219
Unexpected any. Specify a different type
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L211
Unexpected any. Specify a different type
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L161
Unexpected any. Specify a different type
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L147
Unexpected any. Specify a different type
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L139
Unexpected any. Specify a different type
|
|
security-tests:
src/components/common/RelinkDialog.tsx#L93
Unexpected any. Specify a different type
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gitleaks-results.sarif
Expired
|
7.08 KB |
sha256:2fbd4bb1cb25cadb99f5ec06e7c469866fe27d17010de451fa33219418872476
|
|