Skip to content

Merge pull request #15 from JoshuaAFerguson/claude/wire-up-ui-api-cal… #18

Merge pull request #15 from JoshuaAFerguson/claude/wire-up-ui-api-cal…

Merge pull request #15 from JoshuaAFerguson/claude/wire-up-ui-api-cal… #18

Triggered via push November 15, 2025 18:12
Status Failure
Total duration 3m 35s
Artifacts 1
Matrix: CodeQL Analysis
Matrix: Dockerfile Linting
Matrix: Go Dependency Vulnerability Scan
Matrix: Trivy Container Image Scan
npm Dependency Vulnerability Scan
39s
npm Dependency Vulnerability Scan
Secret Scanning with Gitleaks
4s
Secret Scanning with Gitleaks
SAST with Semgrep
39s
SAST with Semgrep
Kubernetes Manifest Security Scan
23s
Kubernetes Manifest Security Scan
Dependency Review
Dependency Review
Security Scan Summary
3s
Security Scan Summary
Fit to window
Zoom out
Zoom in

Annotations

46 errors and 5 warnings
Dockerfile Linting (api): api/Dockerfile#L39
DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
Dockerfile Linting (api): api/Dockerfile#L10
DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
Dockerfile Linting (controller)
The strategy configuration was canceled because "docker-lint.api" failed
Trivy Container Image Scan (ui)
Process completed with exit code 1.
Trivy Container Image Scan (ui)
Path does not exist: trivy-ui-results.sarif
Trivy Container Image Scan (ui)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (ui)
Process completed with exit code 1.
Dockerfile Linting (ui)
The strategy configuration was canceled because "docker-lint.api" failed
Dockerfile Linting (ui)
The operation was canceled.
Trivy Container Image Scan (api)
The strategy configuration was canceled because "trivy-container-scan.ui" failed
Trivy Container Image Scan (api)
Process completed with exit code 1.
Trivy Container Image Scan (api)
Path does not exist: trivy-api-results.sarif
Trivy Container Image Scan (api)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (api)
The operation was canceled.
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L606
templates[j].UsageCount undefined (type *k8s.Template has no field or method UsageCount)
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L606
templates[i].UsageCount undefined (type *k8s.Template has no field or method UsageCount)
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L594
tmpl.Featured undefined (type *k8s.Template has no field or method Featured)
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L298
h.quotaEnforcer.UpdateSessionQuota undefined (type *quota.Enforcer has no field or method UpdateSessionQuota)
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L230
h.quotaEnforcer.UpdateSessionQuota undefined (type *quota.Enforcer has no field or method UpdateSessionQuota)
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L168
h.quotaEnforcer.CheckSessionQuota undefined (type *quota.Enforcer has no field or method CheckSessionQuota)
Go Dependency Vulnerability Scan (api): api/internal/api/handlers.go#L161
undefined: quota.SessionRequest
Go Dependency Vulnerability Scan (api): api/internal/quota/enforcer.go#L118
e.groupDB.GetByName undefined (type *db.GroupDB has no field or method GetByName)
Go Dependency Vulnerability Scan (api): api/internal/quota/enforcer.go#L74
e.userDB.GetByUsername undefined (type *db.UserDB has no field or method GetByUsername)
Go Dependency Vulnerability Scan (controller)
The strategy configuration was canceled because "go-dependency-scan.api" failed
Go Dependency Vulnerability Scan (controller)
cmd.init calls logr.Logger.WithName, which eventually calls tls.Conn.Write
Go Dependency Vulnerability Scan (controller)
controllers.TemplateReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls tls.Conn.Read
Go Dependency Vulnerability Scan (controller)
cmd.main calls manager.controllerManager.Start, which eventually calls tls.Conn.HandshakeContext
Go Dependency Vulnerability Scan (controller)
cmd.main calls manager.controllerManager.Start, which eventually calls pem.Decode
Go Dependency Vulnerability Scan (controller)
controllers.TemplateReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls url.URL.Parse
Go Dependency Vulnerability Scan (controller)
cmd.main calls config.GetConfigOrDie, which eventually calls url.ParseRequestURI
Go Dependency Vulnerability Scan (controller)
controllers.TemplateReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls url.Parse
Go Dependency Vulnerability Scan (controller)
cmd.main calls manager.controllerManager.Start, which eventually calls asn1.Unmarshal
Go Dependency Vulnerability Scan (controller)
controllers.TemplateReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls http.Client.Do
Go Dependency Vulnerability Scan (controller)
cmd.init calls logr.Logger.WithName, which eventually calls x509.Certificate.Verify
Kubernetes Manifest Security Scan
Path does not exist: checkov-k8s-results.sarif
Kubernetes Manifest Security Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (controller)
The strategy configuration was canceled because "trivy-container-scan.ui" failed
Trivy Container Image Scan (controller)
Process completed with exit code 1.
Trivy Container Image Scan (controller)
Path does not exist: trivy-controller-results.sarif
Trivy Container Image Scan (controller)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (controller)
The operation was canceled.
npm Dependency Vulnerability Scan
Process completed with exit code 1.
SAST with Semgrep
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
CodeQL Analysis (javascript)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
CodeQL Analysis (go)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Trivy Container Image Scan (ui)
No files were found with the provided path: trivy-ui-report.html. No artifacts will be uploaded.
Trivy Container Image Scan (api)
No files were found with the provided path: trivy-api-report.html. No artifacts will be uploaded.
Go Dependency Vulnerability Scan (api)
Restore cache failed: Dependencies file is not found in /home/runner/work/streamspace/streamspace. Supported file pattern: go.sum
Go Dependency Vulnerability Scan (controller)
Restore cache failed: Dependencies file is not found in /home/runner/work/streamspace/streamspace. Supported file pattern: go.sum
Trivy Container Image Scan (controller)
No files were found with the provided path: trivy-controller-report.html. No artifacts will be uploaded.

Artifacts

Produced during runtime
Name Size Digest
gitleaks-results.sarif Expired
6.62 KB
sha256:62b81bfe06638d0cca673784bf57848c48e0be25a433384ebdfc5ea52fe88792