Skip to content

feat: ✨ Session budget with HITL pause mode #1038

feat: ✨ Session budget with HITL pause mode

feat: ✨ Session budget with HITL pause mode #1038

Triggered via pull request August 20, 2026 21:28
Status Success
Total duration 1m 30s
Artifacts

security-scans.yaml

on: pull_request
Dependency Review
8s
Dependency Review
Shell Script Lint
19s
Shell Script Lint
YAML Lint
8s
YAML Lint
Python Security (Bandit)
13s
Python Security (Bandit)
Dockerfile Lint (Hadolint)
10s
Dockerfile Lint (Hadolint)
Trivy Filesystem Scan
29s
Trivy Filesystem Scan
Verify Action Pinning
6s
Verify Action Pinning
Matrix: codeql
Fit to window
Zoom out
Zoom in

Annotations

7 errors and 5 warnings
Dockerfile Lint (Hadolint): authbridge/sparc-service/Dockerfile#L19
DL3066 info: Non-numeric user-id may not be resolvable by host system
Dockerfile Lint (Hadolint): authbridge/proxy-init/Dockerfile.init#L14
DL3066 info: Non-numeric user-id may not be resolvable by host system
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-proxy/Dockerfile#L36
DL3003 warning: Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-envoy/Dockerfile#L28
DL3003 warning: Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L144
DL3003 warning: Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L61
SC2015 info: Note that A && B || C is not if-then-else. C may run when A is true.
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L61
DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
YAML Lint: .github/workflows/release-binaries.yaml#L77
77:151 [line-length] line too long (168 > 150 characters)
YAML Lint: .github/workflows/build.yaml#L120
120:151 [line-length] line too long (189 > 150 characters)
Verify Action Pinning
Found actions not pinned to SHA commits:
CodeQL Analysis (python)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
CodeQL Analysis (go)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.