Repository navigation
feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates #160
security.yml
on: pull_request
GoSec (via golangci-lint)
1m 26s
Gitleaks (secret scanning)
36s
Trivy (vulnerability & misconfiguration)
20s
OSV Scanner (dependency vulnerabilities)
16s
All Security Checks Passed
2s
Annotations
9 errors
|
GoSec (via golangci-lint)
Process completed with exit code 1.
|
|
GoSec (via golangci-lint):
tests/contract/main_test.go#L143
G204: Subprocess launched with variable (gosec)
|
|
GoSec (via golangci-lint):
tests/contract/main_test.go#L80
G204: Subprocess launched with variable (gosec)
|
|
GoSec (via golangci-lint):
tests/contract/main_test.go#L72
G204: Subprocess launched with variable (gosec)
|
|
GoSec (via golangci-lint):
internal/verda-cli/cmd/vm/wizard_template_test.go#L103
G304: Potential file inclusion via variable (gosec)
|
|
GoSec (via golangci-lint):
internal/verda-cli/cmd/update/update_test.go#L217
G304: Potential file inclusion via variable (gosec)
|
|
GoSec (via golangci-lint):
internal/verda-cli/cmd/update/update_test.go#L198
G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
GoSec (via golangci-lint):
internal/verda-cli/cmd/update/update_test.go#L175
G304: Potential file inclusion via variable (gosec)
|
|
All Security Checks Passed
Process completed with exit code 1.
|