Audit #41
audit.yml
on: schedule
OpenSSF Scorecard
28s
SBOM (syft)
17s
Deterministic claims guard
50s
Annotations
10 errors and 4 warnings
|
Deterministic claims guard
calnode.main calls http.Server.ListenAndServe
|
|
Deterministic claims guard
mailer.SMTP.Send calls tls.Dialer.DialContext
|
|
Deterministic claims guard
handler.Handler.UploadBrandingLogo calls png.Encoder.Encode, which eventually calls tls.Conn.Write
|
|
Deterministic claims guard
handler.Handler.UploadBrandingLogo calls bytes.Buffer.ReadFrom, which calls tls.Conn.Read
|
|
Deterministic claims guard
calnode.main calls http.Server.ListenAndServe, which eventually calls tls.Conn.HandshakeContext
|
|
Deterministic claims guard
mailer.renderHTML calls template.Template.ExecuteTemplate
|
|
Deterministic claims guard
handler.Handler.BookPage calls template.Template.Execute
|
|
Deterministic claims guard
caldav.resolveRef calls url.URL.ResolveReference
|
|
Deterministic claims guard
zoom.Client.DeleteMeeting calls http.Client.Do, which eventually calls url.URL.Parse
|
|
Deterministic claims guard
handler.Handler.UploadBrandingLogo calls image.Decode, which eventually calls vp8l.Decode
|
|
SBOM (syft)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
OpenSSF Scorecard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
OpenSSF Scorecard
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Deterministic claims guard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5, actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
calnode-sbom.cdx.json
|
27.7 KB |
sha256:30dd275c91532377c8ea5c6014932fb046058e613d558e51f4ad294e5f8d9464
|
|
|
scorecard-sarif
Expired
|
19 KB |
sha256:b4dad7b35f3219c74f061ef5ae0707bed9b36cf81f37d246fba4a7a9ca946102
|
|