Skip to content

fix(npm): discover pnpm virtual-store packages — transitive deps were invisible to apply and scan #599

fix(npm): discover pnpm virtual-store packages — transitive deps were invisible to apply and scan

fix(npm): discover pnpm virtual-store packages — transitive deps were invisible to apply and scan #599

Triggered via pull request August 19, 2026 00:00
Status Success
Total duration 15m 55s
Artifacts 74

ci.yml

on: pull_request
Matrix: coverage-docker
Matrix: test
Matrix: e2e-docker
Matrix: setup-matrix
Matrix: e2e
coverage-merge
26s
coverage-merge
Fit to window
Zoom out
Zoom in

Annotations

25 warnings and 3 notices
dispatch-tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
hosted-e2e
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (golang)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (deno)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (cargo)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (composer)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (nuget)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (npm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (gem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (pypi)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (maven)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (composer)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (cargo)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (deno)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (golang)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (gem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (pypi)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (npm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (nuget)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (maven)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-merge
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (ubuntu-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (macos-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (windows-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
release-lint
all checks passed for 3.3.0
release-lint
version coherence OK: every stamped site already carries 3.3.0
lint-ecosystems
install.socket.dev/patch/latest does not answer yet — skipping the Socket-origin install.

Artifacts

Produced during runtime
Name Size Digest
SocketDev~socket-patch~19WD0Z.dockerbuild
23.3 KB
sha256:c2cae2af0eb83ca6f567c0bc1d5010bf16d4062fe1fea5cc53021fba5d78bdcb
SocketDev~socket-patch~1R37C8.dockerbuild
17.9 KB
sha256:437b3b8c0672e8d511644e4f5a5e3c15974a4f1fe5c92e6469ff1d555391f996
SocketDev~socket-patch~1SIHK7.dockerbuild
11.4 KB
sha256:de6d7bb43613a82c11dec44505acecaf34da1150dca1e40da44755af51911727
SocketDev~socket-patch~2AUMAW.dockerbuild
34.3 KB
sha256:df93bd584be517af98862150e5f54a4abdb23c6113db7700638afb3fbde68363
SocketDev~socket-patch~34Q29U.dockerbuild
35.4 KB
sha256:4e92d713677a92c3511e09034b999b9e1b3113762904c29a56ebd4f113647863
SocketDev~socket-patch~37770D.dockerbuild
24.2 KB
sha256:d738428c50f7f55f410b72ead67804a93085b9550fa6bd7ec926a474d5c4e3e3
SocketDev~socket-patch~4OIPSF.dockerbuild
35.5 KB
sha256:e09fc996a79116e9401a7738a864dc7837398666e88f40aa636725719e902564
SocketDev~socket-patch~4OSQ17.dockerbuild
33.9 KB
sha256:56df928bfd0b8a1ae2f2c591aad3f58fdcc318413be9a20ebca6d7ee71260e60
SocketDev~socket-patch~7T3ZQU.dockerbuild
33.3 KB
sha256:ae7b0ef4b00656cabedd43110ec8f8d4ea9432d3888b5ed6b215d483f38f349b
SocketDev~socket-patch~7Y3R9J.dockerbuild
30.8 KB
sha256:d201a59f80351d5f83c98225cb69a8a95746a2b2cc7f12005dd8aadf6530bb50
SocketDev~socket-patch~866657.dockerbuild
33.3 KB
sha256:66669e0d165880dd0fd0c9dd0f0eb2f380663100c440a354126d75f9bf515b06
SocketDev~socket-patch~9IUXLN.dockerbuild
33.9 KB
sha256:50fd6d9f466653ef4a09c8742fc3c59a99c6e6a932a019b84004d19f5c185c99
SocketDev~socket-patch~A0I2RH.dockerbuild
23.8 KB
sha256:3a8cda0316e7db939fa8d3b3c91e971e8747c9827fea8f838f4aa06b40549cea
SocketDev~socket-patch~AQTFTK.dockerbuild
21 KB
sha256:1500c36c9ff66375c625a0181285edfc4e5151edde55ff27d61731588f072aab
SocketDev~socket-patch~BX9YBR.dockerbuild
20.6 KB
sha256:b0b5c148bf0a6389dd793a265c23c62ff6b7ad905632333ea7af8ac33a5fcfbf
SocketDev~socket-patch~CB4LF4.dockerbuild
35.2 KB
sha256:dfada5bd5cdd6a4d8eb71370086fcc5be824d87a03b0af412acefeff226c53d3
SocketDev~socket-patch~CR9JM3.dockerbuild
29.5 KB
sha256:2cb431f673bb14577efe6ab052b1ee5c247e81f1ae4ff60cc79d15daa137cf78
SocketDev~socket-patch~DCWUZU.dockerbuild
36.1 KB
sha256:56a5a49b68c376e6e681b4c0178ec4d058a98a63579f8ea7aa0c782faffd5003
SocketDev~socket-patch~DDI36U.dockerbuild
17.9 KB
sha256:818380690120f6003f4fa16d2771e82dad4516f97182b73e11dcf563035398d8
SocketDev~socket-patch~DS4DAX.dockerbuild
33.5 KB
sha256:ad5c1102cc0398580e4ab05c20fc0b88b14c0143d71c190071bd4d80d43932ea
SocketDev~socket-patch~DSEVA9.dockerbuild
34.2 KB
sha256:9de63581b9a41a49794141df0270f324cc8084361d6177d4e6f1c17c263ad53c
SocketDev~socket-patch~HKH985.dockerbuild
34.9 KB
sha256:8a78da3d68cdc07195b10aa7ef8ef4549865047cfcd345a35a77630e1d6ced7b
SocketDev~socket-patch~I447O6.dockerbuild
24.1 KB
sha256:239b6f1f3b699b9fb219a4e063c2e7adcf5c81af9faedab6ae1ced998b26ee19
SocketDev~socket-patch~IKIP7L.dockerbuild
18.4 KB
sha256:ecb42d6641adcce5f52554b8c85f8d0cae7db93c9495eecd6972af13bc662263
SocketDev~socket-patch~IWNTNG.dockerbuild
24.3 KB
sha256:67739d5846d5f8bbb092581cb40af40a5149861336906f5204400ed38108cf98
SocketDev~socket-patch~K00HPA.dockerbuild
35.3 KB
sha256:6f52602fd6cd1c25cb565bf078223539a823a12a300f1ea65df57f03f2f4a227
SocketDev~socket-patch~L308XE.dockerbuild
21.6 KB
sha256:88a5f0d145df57760a3ed423af849615f0dfd2ba3682d8b38429f092e0fb6ddb
SocketDev~socket-patch~LN9WUQ.dockerbuild
34.3 KB
sha256:f29ae63df0b10a39e9ad559f622de375c9e2866f1ff548895ea3d386a8c964ce
SocketDev~socket-patch~LUYFPU.dockerbuild
24.5 KB
sha256:a17049cb8fae9275fddeec91e3af1cf8a0209a4c3256ebe531cd0f313d29eb76
SocketDev~socket-patch~NODC1N.dockerbuild
11.4 KB
sha256:d6ddae8575a9d86fa568df285feb30b50a9b7e895a8028294171b18cb634ce38
SocketDev~socket-patch~O4AGIO.dockerbuild
31.1 KB
sha256:1a393999ef9aeab9ac164251e3da908e79e9a279bc6b24fe7a6088e9f0b4acaa
SocketDev~socket-patch~OCFB1B.dockerbuild
34.9 KB
sha256:245ecd1318744cdd60d0708e551e59ddaacb7e6f21a95dfb80630a729f6c779d
SocketDev~socket-patch~OKJHPR.dockerbuild
25 KB
sha256:c1a8c190c658e6167de51ab0a8b34407f038366f4870656f7b5e55c50d10f4bb
SocketDev~socket-patch~OOFM0T.dockerbuild
34.5 KB
sha256:82f87492927c09e99621d61cb37b9ea18114165f9b215d7d4b5d7e41e656e496
SocketDev~socket-patch~OPLRRV.dockerbuild
35.1 KB
sha256:c8139dfca61f3ad8249143d4005f0dae0abe093a0dbe6924a96b4d99ad43e601
SocketDev~socket-patch~P0FXGI.dockerbuild
20.8 KB
sha256:511d19bc041d98bd790c6813ca58b01eb253638af581eaa79cbe582c414d6bc9
SocketDev~socket-patch~PTUIT2.dockerbuild
23.9 KB
sha256:97b4f994f47b0700e5a5c0fc0a7d9b7e7aacc2cab901aa3bd943337dde20a20d
SocketDev~socket-patch~QKQTKT.dockerbuild
32.8 KB
sha256:9d3717a3870dc2b086e1e92b408c6978fd03ac80c830cf4e4ecdedb1382d343b
SocketDev~socket-patch~QV2Q01.dockerbuild
36.1 KB
sha256:b4f71452cde69095f5d4d1756d82d15c363ead99079e0a8e12b914e0bdf9a091
SocketDev~socket-patch~RARA2O.dockerbuild
21.9 KB
sha256:4ffa25fb2132a04b8efccda88cb5f9ed58978f1e13e52ca280177fb2dca8cb7a
SocketDev~socket-patch~S1CYP3.dockerbuild
33.5 KB
sha256:4b31d561f16739273b0f136a0df49f31d6957c10e98cd9a04a5ced8eb7850647
SocketDev~socket-patch~SI7D9L.dockerbuild
34.1 KB
sha256:31d832155cc3dfde716aced29ebcdec90381aad3329a5c50a93568dec8d15dea
SocketDev~socket-patch~SMPZZD.dockerbuild
34.6 KB
sha256:87b6c64de17eda718cea15e62ecd4c0b4992dc0cbf61f3dd22682e675622832c
SocketDev~socket-patch~U5ACV2.dockerbuild
18.8 KB
sha256:8cceb55c63360a71c17fe123a975537c00f4e82f6aa8b539f8c0686667c81d61
SocketDev~socket-patch~UHAF15.dockerbuild
35.2 KB
sha256:5f9fa1d6ad0b6e6f3151fa2557b1f6a38141a2e9b6bd238073da645ab3a1f9fe
SocketDev~socket-patch~ULNDZP.dockerbuild
35.8 KB
sha256:1357227a9ee3454e5008499bdd2391ceeba89e82a4fc7258553bbcb06487e0e7
SocketDev~socket-patch~VPHM2C.dockerbuild
35.7 KB
sha256:fc12265524e3cc7a37f97fa9a77e43657073b3d090084c4c8fbffc886ec1bf48
SocketDev~socket-patch~VUKTW3.dockerbuild
11.5 KB
sha256:24a136a0fd35513176e875216a2e4beea91ed26df63c7623a4ec9e316fbc6515
SocketDev~socket-patch~WI41X6.dockerbuild
34.7 KB
sha256:684c85efd3f67d45fe25c8af1db897b6d4a54b7a54b106e0bf0ed39916e6477a
SocketDev~socket-patch~XN8QPV.dockerbuild
22.2 KB
sha256:2817502cbf62e100c86cd7acca2cab9fc67ab44ff73e942653db8f96a4078ee9
SocketDev~socket-patch~XQ5IVY.dockerbuild
16.2 KB
sha256:d7c7218fbfb1e90545b92fbcae5cb76904f400f4f1e3dc02fc8d2e5e3b69034f
SocketDev~socket-patch~XVUDUX.dockerbuild
35.2 KB
sha256:4f74dcae5e3d78b67275e2fabc5f6b8fde23c97a6d6886a4dab7b8fc37b369f0
SocketDev~socket-patch~YQOTZA.dockerbuild
18.4 KB
sha256:b905099a4a9899214d7136371ba0808f5d94bc11b11bed828a4633ef58d32b69
SocketDev~socket-patch~YZONSN.dockerbuild
25.1 KB
sha256:f3650d9af98bde5191c7bc086f18d8f693dca43dc951e2bfaab46813b294d73e
coverage-docker-cargo
125 KB
sha256:44c10f2f584c0f614690a11def2b55c56fdb79def3943adaf75532c919f833e7
coverage-docker-composer
125 KB
sha256:a3cc97a3b8b52c5d83998aed06c926f760f60806ed00ca9646c426afec1d3996
coverage-docker-deno
125 KB
sha256:8b668fe1e33c7dcf369c3aa27d3b3f2e1d880bbbdacba206fcd78ebdb32a3740
coverage-docker-gem
125 KB
sha256:3fc3bc46297cebb7b89d0ebc7f24b2b1dc55a791d9018fa1572aa78c78267344
coverage-docker-golang
125 KB
sha256:d113e18a1713a513d3b7c1d9ff1f68b0a536210291acb0370d7a63961a31a39b
coverage-docker-maven
125 KB
sha256:ef7d947e6d88ab397c623f4a1e6965b3eb9ec6940184286afe4c224f4cf48917
coverage-docker-npm
125 KB
sha256:a09b3a63f38f7a6aca4d6eb9dc5fe6c9d767c324d9be6795cc5602f08aca75a5
coverage-docker-nuget
125 KB
sha256:09e1d03bbe923559de4cb997b7f9442f25b19ea66cdc1021d5e993bb2a523a2a
coverage-docker-pypi
125 KB
sha256:2aedf6e7075fa1ac9c95d8118ef6929cf5fbfc328a321bde0cf4e7d562cbea70
coverage-host
437 KB
sha256:fec892694fc07c06cd030d072a3842b8e7645a6cc6efc969f6f234acb753e61a
coverage-lcov
476 KB
sha256:7621e0ddbb8deb080c61beb86edfe63e8979390756095fefaa7e7d46e88510fb
setup-matrix-cargo
945 Bytes
sha256:bb0a8a6a84b147ebbc2b736f30efbf57dd22ce5ad82341a4fb85b3122474522c
setup-matrix-composer
909 Bytes
sha256:1eb34179750724a87f517e0ec87a78147dade16aaa2ec4a6a2762aac5024f861
setup-matrix-deno
909 Bytes
sha256:e6426af073573d9f576b6f86bc1d309e28f0498eed485b26b98c7b1cdecdc5e3
setup-matrix-gem
918 Bytes
sha256:8341b4c4f04fecd8cdc3d86c085a1688ce7b7ce4599834add7b21120470c29df
setup-matrix-golang
923 Bytes
sha256:d71c322ba1159416b8f9e19d290c541eb65fca1ecc386e2be1b6e8d9acdde0c1
setup-matrix-maven
937 Bytes
sha256:5906f7744001b9c60315f30013f12d81fdaff1645ba43a1c6a623cbf5e85e7e5
setup-matrix-npm
1.73 KB
sha256:53445e8fe0cb7324254a0bb78f64d0c056c72e575c757a92e314cbe7174d8f85
setup-matrix-nuget
931 Bytes
sha256:ae52238a4aa1c8c3094409dba36e73b15ea7ca11e5391caf3e3dc1532ae192bb
setup-matrix-pypi
1.88 KB
sha256:662ee6369c1c24a9d16f03c3e9f55d33de634e8d049a8a01d62722a0e2713380