feat: add non-blocking "Tatari Org SAST" workflow + design doc #3
escote-tatarisast.yaml
on: pull_request
SAST - Semgrep (code)
20s
SAST - Checkov (IaC)
5s
SAST - Trivy (deps/containers)
11s
Annotations
2 warnings
|
SAST - Trivy (deps/containers)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SAST - Semgrep (code)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
semgrep-sarif
|
190 KB |
sha256:193ebbe643f4cbc4e944db4d9a80191a4a7e8a10988ec286879787cc00a58d41
|
|
|
trivy-sarif
|
468 Bytes |
sha256:45b84ca3c3ae2d7e018a6f67a956309f2ac9f1ca08c9436dac0008da28f365f3
|
|