Skip to content

ci: add extended security scan (secrets, obfuscation, miners, supply-chain) #5

ci: add extended security scan (secrets, obfuscation, miners, supply-chain)

ci: add extended security scan (secrets, obfuscation, miners, supply-chain) #5

Triggered via pull request October 29, 2026 20:58
Status Success
Total duration 7s
Artifacts –

malware-scan.yml

on: pull_request
Scan for PolinRider malware indicators
4s
Scan for PolinRider malware indicators
Fit to window
Zoom out
Zoom in

Annotations

2 errors, 1 warning, and 1 notice
Scan for PolinRider malware indicators: ./jest.config.js#L0
Suspicious: 4 non-empty lines after 'export default' — PolinRider hides payload after config exports
Scan for PolinRider malware indicators: ./eslint.config.js#L0
Suspicious: 11 non-empty lines after 'export default' — PolinRider hides payload after config exports
Scan for PolinRider malware indicators
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan for PolinRider malware indicators
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"