IaC Security Scan

IaC Security Scan #237

Sign in to view logs

Triggered via schedule December 19, 2025 05:02

stegbk

main

Status Failure

Total duration 4m 14s

Artifacts 1

security-iac.yml

on: schedule

Checkov IaC Security Scan

Dockerfile Linting with Hadolint

GitHub Actions Workflow Linting

Annotations

5 errors and 3 warnings

GitHub Actions Workflow Linting

❌ [actionlint] The command ran successfully and some problem was found (found 1 errors, linted 8 files), exit code: 1

GitHub Actions Workflow Linting: .github/workflows/security-secrets.yml#L143

condition "false" is always evaluated to false. remove the if: section

Checkov IaC Security Scan

Path does not exist: checkov-terraform.sarif

Checkov IaC Security Scan

Path does not exist: checkov-gha.sarif

Checkov IaC Security Scan

Path does not exist: checkov-docker.sarif

GitHub Actions Workflow Linting

No files were found with the provided path: actionlint-results.json. No artifacts will be uploaded.

Dockerfile Linting with Hadolint

CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Checkov IaC Security Scan

CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Artifacts

Produced during runtime

Name	Size	Digest
iac-security-results-7059fffdd3f9e4817084f5e4568101a0158a555f Expired	550 Bytes	`sha256:309c1b9293aa59b05ac4bd2f8e9feb9769e05d089d2998f901d5082b5f342f0b`