feat: protocol-1 parity — declarative REST topology, session crypto, TOFU, latency readout #70
security.yml
on: pull_request
shared
/
Action pin lint (40-char SHA required)
6s
shared
/
Vulnerability allowlist expiry check
7s
shared
/
OSV-Scanner (vendored + manifest deps)
5s
shared
/
Dependency review (GitHub advisory DB)
5s
shared
/
Secret scan (gitleaks)
9s
Annotations
1 error and 2 warnings
|
shared / Dependency review (GitHub advisory DB)
Dependency review is not supported on this repository. Please ensure that Dependency graph is enabled along with GitHub Advanced Security on private repositories, see https://github.com/TinkerNorth/dish-linux/settings/security_analysis
|
|
shared / Dependency review (GitHub advisory DB)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
shared / OSV-Scanner (vendored + manifest deps)
OSV-Scanner found no package sources in the requested paths — treating as non-fatal.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gitleaks-report
|
6.91 KB |
sha256:89470273ec1f4b9961ef16a21b32a3aa248b55e93d595b16dadeb0f1628c627b
|
|