Skip to content
BitGo SDK

fix(root): bump sigstore to 4.1.1 to fix GHSA-52v5-jr5w-gjxr #30743

Sign in to view logs

fix(root): bump sigstore to 4.1.1 to fix GHSA-52v5-jr5w-gjxr

fix(root): bump sigstore to 4.1.1 to fix GHSA-52v5-jr5w-gjxr #30743

Triggered via pull request July 2, 2026 13:01
@yashvanthbl137-cryptoyashvanthbl137-crypto
opened #9170
yashvanthbl137/cgd-2015-fix-sigstore-high-vulnerability-ghsa-52v5-jr5w-gjxr-in
Status Success
Total duration 11m 41s
Artifacts 1

ci.yml

on: pull_request
changes
3s
changes
Matrix: code-quality
verify-npm-packages
14s
verify-npm-packages
Matrix: unit-test
browser-test
11m 27s
browser-test
docker-build
11m 2s
docker-build
verify-vendor-integrity
0s
verify-vendor-integrity
dockerfile-check
2m 31s
dockerfile-check
all-checks
3s
all-checks
Fit to window
Zoom out
Zoom in

Annotations

1 warning
docker-build
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83, docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
BitGo~BitGoJS~JXZV8T.dockerbuild
209 KB
sha256:77ca5e826f3651f6462f5624641772b5d21ef3782ef5877f27822813323cbb7a