Close CWE Top 25 / OWASP Top 10 gaps: 12 semgrep rules, actionlint + zizmor, generated coverage matrix #22
arootroatchself-test.yml
on: pull_request
security
/
detect
8s
security
/
clj-kondo
10s
security
/
clj-holmes
9s
security
/
gitleaks
5s
security
/
clj-watson
10s
security
/
semgrep
28s
rule-tests
26s
clj-lib
36s
security
/
shellcheck
7s
security
/
actionlint
5s
security
/
zizmor
12s
Annotations
1 warning and 5 notices
|
security / zizmor
No file matched to [/home/runner/work/github-actions/github-actions/**/*requirements*.txt,/home/runner/work/github-actions/github-actions/**/*requirements*.in,/home/runner/work/github-actions/github-actions/**/*constraints*.txt,/home/runner/work/github-actions/github-actions/**/*constraints*.in,/home/runner/work/github-actions/github-actions/**/pyproject.toml,/home/runner/work/github-actions/github-actions/**/uv.lock,/home/runner/work/github-actions/github-actions/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
|
|
security / clj-kondo
no source paths in 'src/clj src/cljs src/cljc' exist; skipping clj-kondo
|
|
security / clj-kondo
no deps.edn; skipping clj-kondo dependency analysis
|
|
security / clj-kondo
no private-git-ssh-key provided; skipping SSH setup
|
|
security / clj-watson
no deps.edn; skipping clj-watson
|
|
security / clj-watson
no private-git-ssh-key provided; skipping SSH setup
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
clj-holmes-sarif
|
315 Bytes |
sha256:32d9085a4ad4400374db04954a786f3f88522f8236b1102b88730c15c104ac92
|
|
|
semgrep-sarif
|
197 KB |
sha256:0efa894196c36a5c652a9bddd7ae725fa41f5cb1fe6d2ee718d9fc1dcb3e7756
|
|
|
zizmor-sarif
|
391 Bytes |
sha256:a5c4966a845d31f871d47850949002dc8c72f8b4c6068da31bd270090e801bd0
|
|