Security Analysis & Linting #5
security-analysis.yml
on: schedule
Lint & Format Check
10s
Python SAST (Bandit)
10s
Semgrep SAST
32s
SonarQube Local Analysis
39s
Dependency Security Check
38s
Secret Detection
6s
Dockerfile Lint (Hadolint)
8s
Docker Image Security (Trivy)
1m 10s
Docker Filesystem Scan (Trivy)
35s
Annotations
4 errors
|
Lint & Format Check
Process completed with exit code 1.
|
|
Ruff (F401):
src/growmcp/tools/feeds.py#L7
src/growmcp/tools/feeds.py:7:36: F401 `..auth.get_groww_client` imported but unused
|
|
Ruff (F401):
src/growmcp/tools/feeds.py#L3
src/growmcp/tools/feeds.py:3:20: F401 `typing.Optional` imported but unused
|
|
Dependency Security Check
Process completed with exit code 1.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bandit-sast-report
|
862 Bytes |
sha256:1ff9a514d921d1d47b9a4e5a8e9f7a8014827fab7f58176c6fc130d1ec5f271f
|
|
|
dependency-audit-report
|
1.45 KB |
sha256:1963a457427cd1ac096acf3e41c20eb968f186591d622e6b0a38b46d1d5e5b68
|
|
|
gitleaks-secrets-report
|
159 Bytes |
sha256:2a72e02911651f4c94205638e02ce8f6bd1745a3308f2864a85f28fcda38d310
|
|
|
hadolint-report
|
409 Bytes |
sha256:df39a52ffde478ad5f8346d0cd956ea298ca0cc291eb40be6e011e52b8677cff
|
|
|
semgrep-sast-report
|
732 Bytes |
sha256:c4b232d40a890041d0aec8fe9bc2d034d3aaee647948c250ab7a763d88d2de43
|
|
|
sonar-local-report
|
1.2 KB |
sha256:3d5a7d23962d3030a3c1d61270599c63be6cfc70d08e7f4855b6839a952945cb
|
|
|
trivy-filesystem-report
|
534 Bytes |
sha256:cda0fa3aef3927a1bd0a4c1cf7c0b47a4dd117ca196119b4c954976b3ff9095a
|
|
|
trivy-image-report
|
21.3 KB |
sha256:660f2af61a775a15ed2840250eca293bd9097158bb92625fe0743ca6b522c91b
|
|