Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Source Composition Analysis Scan
sca-scan.yml
Workflow options
More workflow actions
Filter workflow runs
Search
Workflow runs for Source Composition Analysis Scan
51 workflow runs
Auto-refresh: 30s
Event
Status
Branch
Actor
More items
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.2
failed:
Source Composition Analysis Scan
#136:
Pull request
#145
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/js-yaml-4.3.2
Sep 13, 2026
46s
More actions for workflow run 136
chore(deps): bump sharp and next
failed:
Source Composition Analysis Scan
#135:
Pull request
#144
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/multi-602d0ec552
Sep 10, 2026
30s
More actions for workflow run 135
chore(deps): bump baseline-browser-mapping from 2.10.29 to 2.11.22
failed:
Source Composition Analysis Scan
#134:
Pull request
#143
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/baseline-browser-mapping-2.11.22
Sep 10, 2026
39s
More actions for workflow run 134
chore(deps): bump browserslist from 4.28.2 to 4.28.9
failed:
Source Composition Analysis Scan
#133:
Pull request
#142
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/browserslist-4.28.9
Sep 7, 2026
33s
More actions for workflow run 133
chore(deps): bump fast-uri from 3.1.2 to 3.1.7
failed:
Source Composition Analysis Scan
#132:
Pull request
#141
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/fast-uri-3.1.7
Sep 2, 2026
38s
More actions for workflow run 132
[Snyk] Upgrade react-dom from 18.3.1 to 19.2.5
failed:
Source Composition Analysis Scan
#131:
Pull request
#132
synchronize
by
uttam-ukkoji-cstk
snyk-upgrade-25cb64976fd4419b984915f23e26e6cc
Aug 14, 2026
35s
More actions for workflow run 131
chore(deps): bump postcss and next
failed:
Source Composition Analysis Scan
#130:
Pull request
#139
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/multi-4441a87159
Aug 14, 2026
37s
More actions for workflow run 130
chore(deps): bump next from 16.2.6 to 16.3.0
failed:
Source Composition Analysis Scan
#129:
Pull request
#140
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/next-16.3.0
Aug 14, 2026
35s
More actions for workflow run 129
chore(deps): bump nanoid from 3.3.12 to 3.3.18
failed:
Source Composition Analysis Scan
#128:
Pull request
#134
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/nanoid-3.3.18
Aug 14, 2026
36s
More actions for workflow run 128
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.1
failed:
Source Composition Analysis Scan
#127:
Pull request
#138
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/js-yaml-4.3.1
Aug 14, 2026
35s
More actions for workflow run 127
chore(deps): bump postcss and next
failed:
Source Composition Analysis Scan
#126:
Pull request
#139
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/multi-4441a87159
Aug 14, 2026
36s
More actions for workflow run 126
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.1
failed:
Source Composition Analysis Scan
#125:
Pull request
#138
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/js-yaml-4.3.1
Aug 14, 2026
37s
More actions for workflow run 125
chore(deps): bump nanoid from 3.3.12 to 3.3.18
failed:
Source Composition Analysis Scan
#124:
Pull request
#134
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/nanoid-3.3.18
Aug 14, 2026
35s
More actions for workflow run 124
chore(deps): bump dompurify from 3.4.3 to 3.4.13
failed:
Source Composition Analysis Scan
#123:
Pull request
#135
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/dompurify-3.4.13
Aug 14, 2026
31s
More actions for workflow run 123
[Snyk] Upgrade react from 18.3.1 to 19.2.5
failed:
Source Composition Analysis Scan
#122:
Pull request
#131
synchronize
by
uttam-ukkoji-cstk
snyk-upgrade-378eff6c45292e73b72240688f063782
Aug 14, 2026
55s
More actions for workflow run 122
chore(deps): bump brace-expansion from 2.1.0 to 2.1.4
failed:
Source Composition Analysis Scan
#121:
Pull request
#137
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/brace-expansion-2.1.4
Aug 14, 2026
30s
More actions for workflow run 121
chore(deps): bump fast-uri from 3.1.2 to 3.1.5
failed:
Source Composition Analysis Scan
#120:
Pull request
#136
synchronize
by
uttam-ukkoji-cstk
dependabot/npm_and_yarn/fast-uri-3.1.5
Aug 14, 2026
29s
More actions for workflow run 120
[Snyk] Upgrade html-react-parser from 3.0.16 to 6.0.1
failed:
Source Composition Analysis Scan
#119:
Pull request
#133
synchronize
by
uttam-ukkoji-cstk
snyk-upgrade-a31b8e156c468bc9800d93f92d37e102
Aug 14, 2026
34s
More actions for workflow run 119
chore(deps): bump next from 16.2.6 to 16.3.0
failed:
Source Composition Analysis Scan
#118:
Pull request
#140
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/next-16.3.0
Aug 13, 2026
35s
More actions for workflow run 118
chore(deps): bump postcss and next
failed:
Source Composition Analysis Scan
#117:
Pull request
#139
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/multi-4441a87159
Aug 13, 2026
39s
More actions for workflow run 117
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.1
failed:
Source Composition Analysis Scan
#116:
Pull request
#138
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/js-yaml-4.3.1
Aug 13, 2026
28s
More actions for workflow run 116
chore(deps): bump brace-expansion from 2.1.0 to 2.1.4
failed:
Source Composition Analysis Scan
#115:
Pull request
#137
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/brace-expansion-2.1.4
Aug 13, 2026
36s
More actions for workflow run 115
chore(deps): bump fast-uri from 3.1.2 to 3.1.5
failed:
Source Composition Analysis Scan
#114:
Pull request
#136
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/fast-uri-3.1.5
Aug 13, 2026
31s
More actions for workflow run 114
chore(deps): bump nanoid from 3.3.12 to 3.3.18
failed:
Source Composition Analysis Scan
#113:
Pull request
#134
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/nanoid-3.3.18
Aug 13, 2026
42s
More actions for workflow run 113
chore(deps): bump dompurify from 3.4.3 to 3.4.13
failed:
Source Composition Analysis Scan
#112:
Pull request
#135
opened
by
dependabot[bot]
Bot
dependabot/npm_and_yarn/dompurify-3.4.13
Aug 13, 2026
32s
More actions for workflow run 112
Previous
1
2
3
Next
You can’t perform that action at this time.