Security scan

fix(release): make pr mode tag on merge instead of on the pre-bump commit #1108

Sign in to view logs

Triggered via pull request August 25, 2026 15:12

BryanFRD

opened #936

fix/pr-mode-two-phase

Status Success

Total duration 1m 22s

Artifacts –

security-scan.yml

on: pull_request

Secrets + CVE / gitleaks (secrets)

Secrets + CVE / osv-scanner (CVE)

Secrets + CVE / opengrep (SAST)

Secrets + CVE / zizmor (GitHub Actions security)

Secrets + CVE / snyk (deps)

Secrets + CVE / trufflehog (secrets, deep history)

Secrets + CVE / Scans ran

Annotations

2 warnings and 1 notice

Secrets + CVE / zizmor (GitHub Actions security)

zizmor found 39 GitHub Actions security finding(s) — see the Security tab (SARIF). Set fail-on-actions: true to make this blocking.

Secrets + CVE / opengrep (SAST)

OpenGrep errored (exit 7) — not failing the scan.

Secrets + CVE / snyk (deps)

SNYK_TOKEN not set — skipping Snyk scan (soft pass).