Skip to content

fix(release): cosign v4 bundle format #145

fix(release): cosign v4 bundle format

fix(release): cosign v4 bundle format #145

Triggered via pull request May 13, 2026 05:38
Status Success
Total duration 28s
Artifacts 1

security.yml

on: pull_request
OSV-Scanner (SCA)
6s
OSV-Scanner (SCA)
Trivy (filesystem + container scan)
7s
Trivy (filesystem + container scan)
Semgrep (SAST)
24s
Semgrep (SAST)
Gitleaks (secret scan)
14s
Gitleaks (secret scan)
jscpd (duplication < 3% on touched code)
12s
jscpd (duplication < 3% on touched code)
SBOM (SPDX + CycloneDX)
15s
SBOM (SPDX + CycloneDX)
Fit to window
Zoom out
Zoom in

Artifacts

Produced during runtime
Name Size Digest
sbom
12.4 KB
sha256:78e872572ad5e275ed51677d6e8c40bda7447091fca8c56ba1cd6fd7be40af00