Skip to content
Security (OSS-CLI)

docs(security): sync .bestpractices.json to live passing state (drop vestigial _url keys) #260

Sign in to view logs

docs(security): sync .bestpractices.json to live passing state (drop vestigial _url keys)

docs(security): sync .bestpractices.json to live passing state (drop vestigial _url keys) #260

Triggered via pull request June 18, 2026 13:28
@aksOpsaksOps
opened #123
docs/bestpractices-sync-passing
Status Success
Total duration 42s
Artifacts 1

security.yml

on: pull_request
OSV-Scanner (SCA)
6s
OSV-Scanner (SCA)
Trivy (filesystem + container scan)
8s
Trivy (filesystem + container scan)
Semgrep (SAST)
22s
Semgrep (SAST)
Gitleaks (secret scan)
7s
Gitleaks (secret scan)
jscpd (duplication < 3% on touched code)
37s
jscpd (duplication < 3% on touched code)
SBOM (SPDX + CycloneDX)
25s
SBOM (SPDX + CycloneDX)
Fit to window
Zoom out
Zoom in

Artifacts

Produced during runtime
Name Size Digest
sbom
60 KB
sha256:94f988953e995cefda8984d378034cb69767f65602b681ec69e67b8498e36095