Security Analysis & Linting #10
security-analysis.yml
on: schedule
Lint & Format Check
10s
Python SAST (Bandit)
8s
Semgrep SAST
30s
SonarQube Local Analysis
33s
Dependency Security Check
39s
Secret Detection
4s
Dockerfile Lint (Hadolint)
8s
Docker Image Security (Trivy)
1m 28s
Docker Filesystem Scan (Trivy)
31s
Annotations
3 errors
|
Lint & Format Check
Process completed with exit code 1.
|
|
ruff (F401):
src/growmcp/tools/feeds.py#L7
src/growmcp/tools/feeds.py:7:36: F401 `..auth.get_groww_client` imported but unused
help: Remove unused import: `..auth.get_groww_client`
|
|
ruff (F401):
src/growmcp/tools/feeds.py#L3
src/growmcp/tools/feeds.py:3:20: F401 `typing.Optional` imported but unused
help: Remove unused import: `typing.Optional`
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bandit-sast-report
|
862 Bytes |
sha256:423194a27726dac835f04f58b981d58f17b1036d3f034c4609d7325ffee67539
|
|
|
dependency-audit-report
|
1.16 KB |
sha256:7d5a944f86709e9e9f3796bb5f82c15c46a950dfbcd1d469feed2ca133f17e38
|
|
|
gitleaks-secrets-report
|
159 Bytes |
sha256:7e8de9590844dbe4290126b0d502f8c32773c448c97ef6190acfc964f977565a
|
|
|
hadolint-report
|
409 Bytes |
sha256:ce29e566d59e40c090d4160d8abba0f71da47b2286b3be2a37730a6550719531
|
|
|
semgrep-sast-report
|
732 Bytes |
sha256:b3f798cfa2f9df94cc45da6d4bc9493bc0933436227074a32b263210a68bf42d
|
|
|
sonar-local-report
|
1.21 KB |
sha256:5615a9481eb0fb925f4135e21fa05f0d8663f60969dcd64ca0726ff146fbcd62
|
|
|
trivy-filesystem-report
|
553 Bytes |
sha256:89eb39f1168084abd286ef76d8eabb3622eaa10eed594963a1cd75d97f96421a
|
|
|
trivy-image-report
|
21 KB |
sha256:22d619ff9a3f100fd51604d85203ff735d0330e2b1625ca4914a09243b9ea6c8
|
|