build(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 (#62) #240
security.yml
on: push
shared
/
Action pin lint (40-char SHA required)
5s
shared
/
Vulnerability allowlist expiry check
6s
shared
/
OSV-Scanner (vendored + manifest deps)
7s
shared
/
Dependency review (GitHub advisory DB)
0s
shared
/
Secret scan (gitleaks)
9s
Annotations
1 warning
|
shared / OSV-Scanner (vendored + manifest deps)
OSV-Scanner found no package sources in the requested paths — treating as non-fatal.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gitleaks-report
|
6.91 KB |
sha256:a5a7456ed3cc1be65d861940e10abfd42fdb8e95e9e37ba298534bb693f642ae
|
|