Skip to content

ci: two test:ci drift checks are never executed by any GitHub Actions job - #9929

Closed
phamngocquy wants to merge 1 commit into
JSONbored:mainfrom
phamngocquy:miner/issue-9649
Closed

ci: two test:ci drift checks are never executed by any GitHub Actions job#9929
phamngocquy wants to merge 1 commit into
JSONbored:mainfrom
phamngocquy:miner/issue-9649

ci: two `test:ci` drift checks are never executed by any GitHub Actio…

22efd55
Select commit
Loading
Failed to load commit list.
Superagent Security / Superagent Supply Chain Scan failed Jul 30, 2026 in 12s

Supply chain risks detected

3 actionable risks across 2 changed dependencies.

Details

Dependency changes

  • actions/cache/restore (github-action) added 55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • codecov/codecov-action (github-action) added fb8b3582c8e4def4969c97caa2f19720cb33a72f

Actionable risks

  • HIGH: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 — Detects keylogging and input capture patterns. Location: cache-55cc8345863c7cc4c66a329aec7e433d2d1c52a9/dist/restore-only/index.js. Rules: threat-runtime-keylogging
  • HIGH: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 — Detects keylogging and input capture patterns. Location: cache-55cc8345863c7cc4c66a329aec7e433d2d1c52a9/dist/restore-only/index.js. Rules: threat-runtime-keylogging
  • HIGH: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 — Detects keylogging and input capture patterns. Location: cache-55cc8345863c7cc4c66a329aec7e433d2d1c52a9/dist/restore-only/index.js. Rules: threat-runtime-keylogging