fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484] #35
maunilmspm-smoke-test.yml
on: pull_request
a11y-scan end-to-end (SwiftPM)
39s
Launcher scripts (bash syntax)
4s
CLI binary integrity check (functional matrix)
4s
CLI checksum sidecar published (advisory until server half ships)
3s
Annotations
4 warnings
|
CLI checksum sidecar published (advisory until server half ships)
No well-formed checksum sidecar at https://sdk-assets.browserstack.com/binary-macos-arm64-1.53.0.zip.sha256 yet (HTTP 403000); CLI binary integrity verification is INERT until the server half ships. Flip this check to a hard failure once sidecars are published.
|
|
Launcher scripts (bash syntax)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CLI binary integrity check (functional matrix)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
a11y-scan end-to-end (SwiftPM)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|