CCM-17044: Resolve remaining vulnerabilities in src/eventcatalog #2580
gareth-allancicd-1-pull-request.yaml
on: push
Set CI/CD metadata
6s
Commit stage
/
Scan secrets
17s
Commit stage
/
Check file format
8s
Commit stage
/
Check Markdown format
5s
Commit stage
/
Check English usage
8s
Commit stage
/
Check TODO usage
6s
Commit stage
/
Count lines of code
9s
Commit stage
/
Scan dependencies
54s
Commit stage
/
Run terraform-docs
0s
Commit stage
/
Lint Terraform
0s
Test stage
/
Contract tests
52s
Test stage
/
Linting
2m 34s
Test stage
/
Typecheck
2m 9s
Publish stage
/
Publish packages
Acceptance stage
/
Security test
4s
Acceptance stage
/
UI test
4s
Acceptance stage
/
UI performance test
6s
Acceptance stage
/
Integration test
11m 49s
Acceptance stage
/
Accessibility test
4s
Acceptance stage
/
Load test
5s
Annotations
16 warnings
|
Test stage / Detect Schema Changes
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Test stage / Contract tests
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Test stage / Linting:
src/typescript-schema-generator/src/generate-guard-functions.ts#L51
Found writeFileSync from package "node:fs" with non literal argument at index 0
|
|
Test stage / Linting:
lambdas/ttl-handle-expiry-lambda/src/__tests__/app/dlq.test.ts#L183
Variable Assigned to Object Injection Sink
|
|
Test stage / Linting:
lambdas/print-analyser/src/__tests__/test-data.ts#L61
Found readFileSync from package "node:fs" with non literal argument at index 0
|
|
Test stage / Linting:
utils/utils/src/event-publisher/event-publisher.ts#L101
Function Call Object Injection Sink
|
|
Test stage / Linting:
utils/utils/src/event-publisher/event-publisher.ts#L99
Generic Object Injection Sink
|
|
Test stage / Linting:
utils/utils/src/dynamodb/delete-dynamo-batch.ts#L47
Generic Object Injection Sink
|
|
Test stage / Linting:
utils/utils/src/dynamodb/delete-dynamo-batch.ts#L34
Generic Object Injection Sink
|
|
Test stage / Linting:
utils/utils/src/config-reader.ts#L69
Variable Assigned to Object Injection Sink
|
|
Test stage / Linting:
utils/utils/src/cache/cache.ts#L52
Generic Object Injection Sink
|
|
Test stage / Linting:
utils/utils/src/cache/cache.ts#L33
Variable Assigned to Object Injection Sink
|
|
Test stage / Unit tests
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Test stage / Perform static analysis
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build stage / Detect Documentation Changes
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build stage / Build Docs
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b, actions/upload-artifact@v4, ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
code-coverage-report
|
16.7 KB |
sha256:20c4b0e2db96d3783221f17ffb0ed1b2aef7fc47bcf5b15ed93682db7708728c
|
|
|
jekyll-docs-0.0.2-20260423.093743+b108961
Expired
|
20.8 MB |
sha256:2e414d9525bccb5f7e6b1a3f2d1f094de77e233a7b0d731432c8e33b964efee1
|
|
|
lines-of-code-report.json.zip
|
994 Bytes |
sha256:e6437da27c544250f1d69ed25386ec629e4b393516b2b8debf3388fbe693c2a3
|
|
|
pact-contracts
|
609 Bytes |
sha256:d47b8cfeb3e44a8f7152bbed28ceba19e7572f6846843c0d1cfd5775af366ae4
|
|
|
python-coverage-reports
|
13.4 KB |
sha256:d1918cec9285d0a65889f8478508302f3a87ef0eff2cc23f9534307915d86f3b
|
|
|
sbom-repository-report.json.zip
|
375 KB |
sha256:3962b66f15d8f05811923c05a845bcc19c6a268c1b550c164025a02c548ea7a3
|
|
|
schemas-0.0.2-20260423.093743+b108961
|
44.9 KB |
sha256:23f15bf821af6659dcaeb8aa8f6c5e63e532454072d39c0f52194b135b86effe
|
|
|
unit-tests
|
1.87 MB |
sha256:a2407042e2ec78ef76266b98821c94b94f7d72c7693e1e81026d4ae1444a4f05
|
|
|
vulnerabilities-repository-report.json.zip
|
3.57 KB |
sha256:d32a912507d6b4017f02704cfd30386cd62652ab88eb1b8c7dc7dbf1116b79eb
|
|