🛑 missing gitleaks license. Go grab one at gitleaks.io and store it as a GitHub Secret named GITLEAKS_LICENSE. For more info about the recent breaking update, see [here](https://github.com/gitleaks/gitleaks-action#-announcement).

Go Dependency Vulnerability Scan (k8s-controller)

Process completed with exit code 1.

Go Dependency Vulnerability Scan (api)

The strategy configuration was canceled because "go-dependency-scan.k8s-controller" failed

Go Dependency Vulnerability Scan (api)

The operation was canceled.

Trivy Container Image Scan (kubernetes-controller)

Process completed with exit code 1.

Trivy Container Image Scan (kubernetes-controller)

Path does not exist: trivy-kubernetes-controller-results.sarif

Trivy Container Image Scan (kubernetes-controller)

Process completed with exit code 1.

Kubernetes Manifest Security Scan

Path does not exist: checkov-k8s-results.sarif

Trivy Container Image Scan (ui)

The strategy configuration was canceled because "trivy-container-scan.kubernetes-controller" failed

Trivy Container Image Scan (ui)

Process completed with exit code 1.

Trivy Container Image Scan (ui)

Path does not exist: trivy-ui-results.sarif

Trivy Container Image Scan (ui)

The operation was canceled.

Trivy Container Image Scan (api)

The strategy configuration was canceled because "trivy-container-scan.kubernetes-controller" failed

Trivy Container Image Scan (api)

Process completed with exit code 1.

Trivy Container Image Scan (api)

Path does not exist: trivy-api-results.sarif

Trivy Container Image Scan (api)

The operation was canceled.

npm Dependency Vulnerability Scan

Process completed with exit code 1.

Dockerfile Linting (k8s-controller)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Dockerfile Linting (api)

Secret Scanning with Gitleaks

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, gitleaks/gitleaks-action@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Go Dependency Vulnerability Scan (k8s-controller)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Go Dependency Vulnerability Scan (k8s-controller)

Restore cache failed: Dependencies file is not found in /home/runner/work/streamspace/streamspace. Supported file pattern: go.sum

Go Dependency Vulnerability Scan (api)

Restore cache failed: Dependencies file is not found in /home/runner/work/streamspace/streamspace. Supported file pattern: go.sum

Trivy Container Image Scan (kubernetes-controller)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Trivy Container Image Scan (kubernetes-controller)

No files were found with the provided path: trivy-kubernetes-controller-report.html. No artifacts will be uploaded.

Trivy Container Image Scan (kubernetes-controller)

CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Kubernetes Manifest Security Scan

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Kubernetes Manifest Security Scan

Trivy Container Image Scan (ui)

No files were found with the provided path: trivy-ui-report.html. No artifacts will be uploaded.

Trivy Container Image Scan (ui)

Trivy Container Image Scan (api)

No files were found with the provided path: trivy-api-report.html. No artifacts will be uploaded.

Trivy Container Image Scan (api)

SAST with Semgrep

npm Dependency Vulnerability Scan

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Analysis (javascript)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/analyze@v3, github/codeql-action/autobuild@v3, github/codeql-action/init@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

CodeQL Analysis (javascript)

CodeQL Analysis (go)

Navigation Menu

Uh oh!

Security Scanning #476

Summary

Security Scanning #476

Uh oh!

security-scan.yml

Annotations