docs: rewrite README, add issue templates and triage workflow #14
security-scan.yml
on: push
Trivy Filesystem Scan
24s
Dependency Review
0s
Gitleaks
10s
SBOM
10s
Matrix: CodeQL
Matrix: Trivy Image Scan
Annotations
13 errors and 30 warnings
|
Trivy Image Scan (xarch-mcp-knowledge)
Path does not exist: trivy-xarch-mcp-knowledge.sarif
|
|
Trivy Image Scan (xarch-mcp-knowledge)
buildx failed with: ERROR: failed to build: failed to solve: gradle:8.10-jdk25: failed to resolve source metadata for docker.io/library/gradle:8.10-jdk25: docker.io/library/gradle:8.10-jdk25: not found
|
|
Trivy Image Scan (xarch-mcp-vector)
Path does not exist: trivy-xarch-mcp-vector.sarif
|
|
Trivy Image Scan (xarch-mcp-vector)
buildx failed with: ERROR: failed to build: failed to solve: gradle:8.10-jdk25: failed to resolve source metadata for docker.io/library/gradle:8.10-jdk25: docker.io/library/gradle:8.10-jdk25: not found
|
|
Trivy Image Scan (xarch-cloud-gateway)
Path does not exist: trivy-xarch-cloud-gateway.sarif
|
|
Trivy Image Scan (xarch-cloud-gateway)
buildx failed with: ERROR: failed to build: failed to solve: gradle:8.10-jdk25: failed to resolve source metadata for docker.io/library/gradle:8.10-jdk25: docker.io/library/gradle:8.10-jdk25: not found
|
|
Trivy Image Scan (xarch-example)
Path does not exist: trivy-xarch-example.sarif
|
|
Trivy Image Scan (xarch-example)
buildx failed with: ERROR: failed to build: failed to solve: gradle:8.10-jdk25: failed to resolve source metadata for docker.io/library/gradle:8.10-jdk25: docker.io/library/gradle:8.10-jdk25: not found
|
|
Trivy Image Scan (xarch-mcp-database)
Path does not exist: trivy-xarch-mcp-database.sarif
|
|
Trivy Image Scan (xarch-mcp-database)
buildx failed with: ERROR: failed to build: failed to solve: gradle:8.10-jdk25: failed to resolve source metadata for docker.io/library/gradle:8.10-jdk25: docker.io/library/gradle:8.10-jdk25: not found
|
|
Trivy Image Scan (xarch-mcp-filesystem)
Path does not exist: trivy-xarch-mcp-filesystem.sarif
|
|
Trivy Image Scan (xarch-mcp-filesystem)
buildx failed with: ERROR: failed to build: failed to solve: gradle:8.10-jdk25: failed to resolve source metadata for docker.io/library/gradle:8.10-jdk25: docker.io/library/gradle:8.10-jdk25: not found
|
|
CodeQL (java)
We were unable to automatically build your code. Please replace the call to the autobuild action with your custom build steps. Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.25.6/x64/codeql/java/tools/autobuild.sh". Exit code was 1 and last log line was: Picked up JAVA_TOOL_OPTIONS: -Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false. See the logs for more details.
|
|
SBOM
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Gitleaks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, gitleaks/gitleaks-action@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Gitleaks
Unexpected input(s) 'args', valid inputs are ['']
|
|
Trivy Image Scan (xarch-mcp-knowledge)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Image Scan (xarch-mcp-knowledge)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy Image Scan (xarch-mcp-vector)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Image Scan (xarch-mcp-vector)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy Image Scan (xarch-cloud-gateway)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Image Scan (xarch-cloud-gateway)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy Image Scan (xarch-example)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Image Scan (xarch-example)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy Image Scan (xarch-mcp-database)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Image Scan (xarch-mcp-database)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy Image Scan (xarch-mcp-filesystem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Image Scan (xarch-mcp-filesystem)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
Trivy Filesystem Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Trivy Filesystem Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
CodeQL (python)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/analyze@v3, github/codeql-action/autobuild@v3, github/codeql-action/init@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL (python)
1 issue was detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'.
|
|
CodeQL (python)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
CodeQL (typescript)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/analyze@v3, github/codeql-action/autobuild@v3, github/codeql-action/init@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL (typescript)
1 issue was detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'.
|
|
CodeQL (typescript)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
CodeQL (javascript)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/analyze@v3, github/codeql-action/autobuild@v3, github/codeql-action/init@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL (javascript)
Failed to save: Unable to reserve cache with key codeql-trap-1-2.25.6-javascript-088163581731999a136c05a018d3ac64940cc23b, another job may be creating this cache.
|
|
CodeQL (javascript)
1 issue was detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'.
|
|
CodeQL (javascript)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
CodeQL (java)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/autobuild@v3, github/codeql-action/init@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL (java)
1 issue was detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'.
|
|
CodeQL (java)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gitleaks-results.sarif
|
6.59 KB |
sha256:928cb21b64dc0b71b7953008b6f7cc65d25b31ec702ebb034cdf23e700bb56f5
|
|
|
processcrash~xarch~56NNH5.dockerbuild
|
11.9 KB |
sha256:0f366d108a912c92e3adfefd5e96acfcb8697964e721fccbd8b38353265d11c9
|
|
|
processcrash~xarch~JVKZ92.dockerbuild
|
11.9 KB |
sha256:764dda73f2d960a12097e925cea26e079186094ec279a53a8f919321d83eb95b
|
|
|
processcrash~xarch~M2OGEX.dockerbuild
|
11.9 KB |
sha256:2bf1c451fefecc51da45244c97283f5277448e9e6faa7808d3311a324ec25728
|
|
|
processcrash~xarch~TYHSGK.dockerbuild
|
12.7 KB |
sha256:ee4d89823df5a42495cf9dfc8243e23cc78f9615964d5545cdf7fa9dcb30c6bc
|
|
|
processcrash~xarch~UU0C00.dockerbuild
|
11.9 KB |
sha256:f2b5efa0ad04109f3c481e24b3dbd16dafae5df62995b188b5a64b1fb5b281c9
|
|
|
processcrash~xarch~UZBYKT.dockerbuild
|
12 KB |
sha256:9ac7d1000f4294e6149ad1fb037071557cb7e0e9ad03d293b4c6fb8a9a7d6e3f
|
|
|
trivy-fs-report
Expired
|
464 Bytes |
sha256:fa791bf1e33164ca2dedf40031d4492d6cfada1de93aa3cba9e8da91a36a8209
|
|
|
xarch-sbom.cdx.json
|
5.05 KB |
sha256:a3f873e6d191f5e0764ddaf5df76929658fa0569d6f05387e2c55fe7bff6996d
|
|