Skip to content

Security Analysis & Linting #5

Security Analysis & Linting

Security Analysis & Linting #5

Triggered via schedule February 1, 2026 01:06
Status Failure
Total duration 1m 13s
Artifacts 8

security-analysis.yml

on: schedule
Lint & Format Check
10s
Lint & Format Check
Python SAST (Bandit)
10s
Python SAST (Bandit)
Semgrep SAST
32s
Semgrep SAST
SonarQube Local Analysis
39s
SonarQube Local Analysis
Dependency Security Check
38s
Dependency Security Check
Secret Detection
6s
Secret Detection
Dockerfile Lint (Hadolint)
8s
Dockerfile Lint (Hadolint)
Docker Image Security (Trivy)
1m 10s
Docker Image Security (Trivy)
Docker Filesystem Scan (Trivy)
35s
Docker Filesystem Scan (Trivy)
Fit to window
Zoom out
Zoom in

Annotations

4 errors
Lint & Format Check
Process completed with exit code 1.
Ruff (F401): src/growmcp/tools/feeds.py#L7
src/growmcp/tools/feeds.py:7:36: F401 `..auth.get_groww_client` imported but unused
Ruff (F401): src/growmcp/tools/feeds.py#L3
src/growmcp/tools/feeds.py:3:20: F401 `typing.Optional` imported but unused
Dependency Security Check
Process completed with exit code 1.

Artifacts

Produced during runtime
Name Size Digest
bandit-sast-report
862 Bytes
sha256:1ff9a514d921d1d47b9a4e5a8e9f7a8014827fab7f58176c6fc130d1ec5f271f
dependency-audit-report
1.45 KB
sha256:1963a457427cd1ac096acf3e41c20eb968f186591d622e6b0a38b46d1d5e5b68
gitleaks-secrets-report
159 Bytes
sha256:2a72e02911651f4c94205638e02ce8f6bd1745a3308f2864a85f28fcda38d310
hadolint-report
409 Bytes
sha256:df39a52ffde478ad5f8346d0cd956ea298ca0cc291eb40be6e011e52b8677cff
semgrep-sast-report
732 Bytes
sha256:c4b232d40a890041d0aec8fe9bc2d034d3aaee647948c250ab7a763d88d2de43
sonar-local-report
1.2 KB
sha256:3d5a7d23962d3030a3c1d61270599c63be6cfc70d08e7f4855b6839a952945cb
trivy-filesystem-report
534 Bytes
sha256:cda0fa3aef3927a1bd0a4c1cf7c0b47a4dd117ca196119b4c954976b3ff9095a
trivy-image-report
21.3 KB
sha256:660f2af61a775a15ed2840250eca293bd9097158bb92625fe0743ca6b522c91b