Skip to content

fix(security): Prevent GitHub script injection in update-tox workflow #3189

fix(security): Prevent GitHub script injection in update-tox workflow

fix(security): Prevent GitHub script injection in update-tox workflow #3189

Triggered via pull request April 29, 2026 11:46
Status Success
Total duration 5m 29s
Artifacts 12

test-integrations-agents.yml

on: pull_request
Matrix: Agents
All Agents tests passed
2s
All Agents tests passed
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Agents (3.11, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Agents (3.14t, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Agents (3.10, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Agents (3.12, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Agents (3.14, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Agents (3.13, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
codecov-coverage-results-fix-github-script-injection-vuln-1594-test-agents
116 KB
sha256:5337289f2952e6113b12a7d61e464e1e5ae6b3f3c6f14ef9d6479fe192fa40c1
codecov-coverage-results-fix-github-script-injection-vuln-1594-test-agents
116 KB
sha256:0590657fe6009290847b0c9345875476686dbd9ce3906d6c709fac38b95d8e48
codecov-coverage-results-fix-github-script-injection-vuln-1594-test-agents
115 KB
sha256:95cf99cbe35a2792d20b9b687304b94aa62ddd9a4fa3e7c9294ff8e8de06149f
codecov-coverage-results-fix-github-script-injection-vuln-1594-test-agents
115 KB
sha256:c57215a9aedc9f1de57b1f1dd01e5d336d96bc7a413eaade07d6009b1c12b9be
codecov-coverage-results-fix-github-script-injection-vuln-1594-test-agents
115 KB
sha256:56783b8bfe7f74c0856dca9f8e58f3c60cabba522eedd85956e8d13990d7ab48
codecov-coverage-results-fix-github-script-injection-vuln-1594-test-agents
115 KB
sha256:75dfde539e28423ee831ed966be67e4a3235cd8e3478d40715ffe0b61bfe4109
codecov-test-results-fix-github-script-injection-vuln-1594-test-agents
240 Bytes
sha256:8e5df98c6353881ec52a6db8977d3d67537296739b401a7c6b46dfb8555b4c86
codecov-test-results-fix-github-script-injection-vuln-1594-test-agents
233 Bytes
sha256:02225efa67e7944b95240f81bfae5b745190277fdc19c4bd8e657405387a800d
codecov-test-results-fix-github-script-injection-vuln-1594-test-agents
239 Bytes
sha256:6b09810262c9046084177b0aa0a5f8623e2e4d2f3d0ec1e506a78d535fae03fd
codecov-test-results-fix-github-script-injection-vuln-1594-test-agents
239 Bytes
sha256:7d2a733bb12c19b944bfbc9ca23b874a7bab03c7b887d14aa50345aa5aabe08e
codecov-test-results-fix-github-script-injection-vuln-1594-test-agents
239 Bytes
sha256:f331e4289246afd6b2fc5245b3b0c5cf84c1fab247a16827e398cee0ca7cca3c
codecov-test-results-fix-github-script-injection-vuln-1594-test-agents
239 Bytes
sha256:b93434dc2d4375986d01ff773de3374ba2507e442420504ef8ee61e7d4713340