Skip to content
Validate Dependencies

ci(validate-deps): judge a pull request's OSV findings against the merge base; main keeps the absolute daily scan; job timeout 15 min #5977

Sign in to view logs

ci(validate-deps): judge a pull request's OSV findings against the merge base; main keeps the absolute daily scan; job timeout 15 min

ci(validate-deps): judge a pull request's OSV findings against the merge base; main keeps the absolute daily scan; job timeout 15 min #5977

Triggered via pull request October 8, 2026 02:49
@os-justinos-justin
synchronize #22138
claude/issue-22082-osv-base-relative
Status Success
Total duration 1m 7s
Artifacts –

validate-deps.yml

on: pull_request
Validate Package Dependencies
1m 3s
Validate Package Dependencies
Fit to window
Zoom out
Zoom in

Annotations

2 notices
OSV-Scanner verdict (base-relative)
lockfile unchanged — inherits main's verdict. pnpm-lock.yaml and osv-scanner.toml are identical to the merge base ef1fcb26a24f, so this pull request introduces no advisory; main's daily scheduled scan judges that lockfile.
Validate Package Dependencies
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"