UI5 / cli

94%

main: 94%

LAST BUILD ON BRANCH refactor-security-audit

branch: refactor-security-audit

CHANGE BRANCH

x

Reset

Sync Branches

• refactor-security-audit
• add-development-setup-instructions
• audit-ci-node-version
• audit-ci-update
• benchmark
• build-server-defer-initial-build
• bump-browseslist
• bump-deps
• bump-eslint-plugin-jsdoc
• bump-express-in-server
• bump-glob
• bump-lockfile
• bump-undici
• bundledAnnotationChanges
• ci-remove-admzip-from-audit-allow
• ci/audit-ci-script
• ci/do-not-fail-ci-on-coveralls-downtimes
• ci/fix-coveralls-pr-summary
• ci/hardening
• ci/manual-publish-cli-dispatch
• ci/parallel-workspace-tests
• ci/pin-action-versions
• ci/release-env
• ci/setup-schema-build
• cleanup-root-package
• component-type-custom-tasks
• cpu-profile
• dependabot-config-update
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/checkout-7
• dependabot/github_actions/actions/configure-pages-5
• dependabot/github_actions/actions/configure-pages-6
• dependabot/github_actions/actions/setup-node-6
• dependabot/github_actions/actions/setup-node-7
• dependabot/github_actions/actions/stale-10.3.0
• dependabot/github_actions/actions/stale-11
• dependabot/github_actions/coverallsapp/github-action-2.3.7
• dependabot/github_actions/coverallsapp/github-action-2.3.8
• dependabot/github_actions/dependabot/fetch-metadata-3
• dependabot/github_actions/googleapis/release-please-action-5
• dependabot/npm_and_yarn/adm-zip-0.6.0
• dependabot/npm_and_yarn/ajv-8.18.0
• dependabot/npm_and_yarn/ajv-errors-3.0.0
• dependabot/npm_and_yarn/apidevtools/json-schema-ref-parser-16.0.3
• dependabot/npm_and_yarn/ava-7.0.0
• dependabot/npm_and_yarn/ava-8.0.0
• dependabot/npm_and_yarn/ava-8.0.1
• dependabot/npm_and_yarn/body-parser-2.2.0
• dependabot/npm_and_yarn/body-parser-2.2.2
• dependabot/npm_and_yarn/body-parser-2.3.0
• dependabot/npm_and_yarn/chalk-6.0.0
• dependabot/npm_and_yarn/commitlint/cli-21.2.3
• dependabot/npm_and_yarn/commitlint/config-conventional-21.0.2
• dependabot/npm_and_yarn/cross-env-10.1.0
• dependabot/npm_and_yarn/cssnano-9.0.5
• dependabot/npm_and_yarn/escape-unicode-0.3.0
• dependabot/npm_and_yarn/eslint-10.0.0
• dependabot/npm_and_yarn/eslint-10.1.0
• dependabot/npm_and_yarn/eslint-10.2.0
• dependabot/npm_and_yarn/eslint-10.3.0
• dependabot/npm_and_yarn/eslint-10.4.1
• dependabot/npm_and_yarn/eslint-plugin-jsdoc-63.2.2
• dependabot/npm_and_yarn/eslint-plugin-jsdoc-64.2.1
• dependabot/npm_and_yarn/eslint-plugin-jsdoc-65.0.1
• dependabot/npm_and_yarn/espree-11.2.0
• dependabot/npm_and_yarn/execa-10.0.1
• dependabot/npm_and_yarn/express-5.2.1
• dependabot/npm_and_yarn/fast-uri-3.1.2
• dependabot/npm_and_yarn/fast-uri-3.1.4
• dependabot/npm_and_yarn/fast-uri-3.1.5
• dependabot/npm_and_yarn/fast-uri-3.1.7
• dependabot/npm_and_yarn/fast-uri-3.1.8
• dependabot/npm_and_yarn/flatted-3.4.2
• dependabot/npm_and_yarn/globals-17.3.0
• dependabot/npm_and_yarn/globby-16.2.0
• dependabot/npm_and_yarn/globby-16.2.2
• dependabot/npm_and_yarn/globby-16.2.3
• dependabot/npm_and_yarn/globby-16.2.4
• dependabot/npm_and_yarn/handlebars-4.7.9
• dependabot/npm_and_yarn/in-range-6ad262deb9
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a.ts/babel/core-7.29.7
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a.ts/babel/plugin-transform-modules-systemjs-7.29.4
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a.ts/browserslist-4.28.8
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a.ts/js-yaml-4.3.0
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a.ts/js-yaml-4.3.2
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/fast-uri-3.1.2
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/fast-uri-3.1.4
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/fast-uri-3.1.5
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/fast-uri-3.1.7
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/fast-xml-builder-1.2.0
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/ip-address-10.4.0
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/ip-address-10.7.2
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/js-yaml-4.2.0
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/js-yaml-4.3.1
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/js-yaml-4.3.2
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/multi-581aeff57e
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/multi-c906a11201
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/multi-dcc3f92f05
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/tar-7.5.16
• dependabot/npm_and_yarn/internal/e2e-tests/fixtures/application.a/tar-7.5.20
• dependabot/npm_and_yarn/ip-address-10.2.0
• dependabot/npm_and_yarn/ip-address-10.4.0
• dependabot/npm_and_yarn/ip-address-10.7.2
• dependabot/npm_and_yarn/js-beautify-2.0.3
• dependabot/npm_and_yarn/js-cookie-3.0.7
• dependabot/npm_and_yarn/js-yaml-4.3.1
• dependabot/npm_and_yarn/js-yaml-5.4.1
• dependabot/npm_and_yarn/knip-6.1.0
• dependabot/npm_and_yarn/knip-6.17.1
• dependabot/npm_and_yarn/knip-6.21.0
• dependabot/npm_and_yarn/knip-6.3.0
• dependabot/npm_and_yarn/knip-6.4.0
• dependabot/npm_and_yarn/less-openui5-0.12.0
• dependabot/npm_and_yarn/lodash-4.17.23
• dependabot/npm_and_yarn/lodash-4.18.1
• dependabot/npm_and_yarn/make-fetch-happen-15.0.2
• dependabot/npm_and_yarn/make-fetch-happen-15.0.5
• dependabot/npm_and_yarn/markdown-it-14.3.2
• dependabot/npm_and_yarn/mime-types-3.0.2
• dependabot/npm_and_yarn/multi-330a1db690
• dependabot/npm_and_yarn/multi-4fef312196
• dependabot/npm_and_yarn/multi-57637e47fe
• dependabot/npm_and_yarn/multi-63438e3ae8
• dependabot/npm_and_yarn/multi-75e6bc5210
• dependabot/npm_and_yarn/multi-bf05dc1ecf
• dependabot/npm_and_yarn/multi-db9a834ca8
• dependabot/npm_and_yarn/multi-e855e31deb
• dependabot/npm_and_yarn/multi-f792d6d6d9
• dependabot/npm_and_yarn/npm-69aacfa821
• dependabot/npm_and_yarn/npm-7762c1252c
• dependabot/npm_and_yarn/npm-8419d30122
• dependabot/npm_and_yarn/npm-c0d1c37c9c
• dependabot/npm_and_yarn/npm-d7185eef00
• dependabot/npm_and_yarn/npm-dev-0b87f10784
• dependabot/npm_and_yarn/npm-dev-2b528d157b
• dependabot/npm_and_yarn/npm-dev-4c2156b3a3
• dependabot/npm_and_yarn/npm-dev-869a17fdd8
• dependabot/npm_and_yarn/npm-dev-8e0fb44b0b
• dependabot/npm_and_yarn/npm-dev-a011293135
• dependabot/npm_and_yarn/npm-dev-ec83feb977
• dependabot/npm_and_yarn/npm-e47ef7d623
• dependabot/npm_and_yarn/npmcli/arborist-9.1.9
• dependabot/npm_and_yarn/npmcli/config-11.0.1
• dependabot/npm_and_yarn/open-11.0.0
• dependabot/npm_and_yarn/open-11.0.1
• dependabot/npm_and_yarn/packages/documentation/js-yaml-4.1.1
• dependabot/npm_and_yarn/pacote-21.0.3
• dependabot/npm_and_yarn/pacote-22.0.0
• dependabot/npm_and_yarn/postcss-8.5.10
• dependabot/npm_and_yarn/postcss-8.5.23
• dependabot/npm_and_yarn/qs-6.14.1
• dependabot/npm_and_yarn/qs-6.16.0
• dependabot/npm_and_yarn/read-package-up-12.0.0
• dependabot/npm_and_yarn/read-pkg-10.0.0
• dependabot/npm_and_yarn/sinon-21.0.1
• dependabot/npm_and_yarn/sinon-22.1.0
• dependabot/npm_and_yarn/ssri-14.0.0
• dependabot/npm_and_yarn/svgo-4.1.0
• dependabot/npm_and_yarn/tailwindcss-4.1.18
• dependabot/npm_and_yarn/tailwindcss-4.2.2
• dependabot/npm_and_yarn/tar-7.5.22
• dependabot/npm_and_yarn/tar-7.5.9
• dependabot/npm_and_yarn/types/node-25.0.6
• dependabot/npm_and_yarn/types/node-25.2.2
• dependabot/npm_and_yarn/types/node-26.5.1
• dependabot/npm_and_yarn/undici-6.27.0
• dependabot/npm_and_yarn/undici-6.28.0
• dependabot/npm_and_yarn/workerpool-10.0.0
• dependabot/npm_and_yarn/yargs-18.0.0
• dependency/js-yaml/3.15.0-3.15.1
• dependency/nano-id/3.3.16-3.3.18
• deps-update
• deps-update-sinon
• deps-updates
• deps/update-ajv
• deps/update-minimatch
• dev/npm-script-for-docs-in-root
• diagnose-build-cache-miss
• disable-security-audit-for-v3
• docs-multi-branch-dev
• docs-path-mappings-theme-library
• docs-refactor
• docs-update-404-html
• docs/config-add-component-type
• docs/fix-missing-quote
• docs/fix-superscript-numbers
• docs/fix-ui5-dark-logo
• docs/server
• docs/server-v5-architecture
• docs/update-copyright-year-to-2026
• document-component-type
• document-documentation-package
• document-release-please
• engine-compatibility-checks
• engine-compatibility-checks-script
• escape-html-in-comments
• experimental-bip-upport
• feat-bump-alpha-release
• feat-clean-cache
• feat-enable-publishing
• feat-limit-generateLibraryManifest
• feat-release-5-alpha
• feat-rp-single-pr
• feat/build-for-cache
• feat/cache-clean-project
• feat/clean-cache-command
• feat/component-type
• feat/incremental-build
• feat/incremental-build-2
• feat/incremental-build-4
• feat/incremental-build-5
• feat/incremental-build-documentation
• feat/initialize-v5-prereleases
• feat/liveReload
• feat/logger-module-filtering
• feat/server-integration-api
• feat/step-cache-api
• feat/svg-less-rewrite
• feat/ui5-watch-mode-off
• feature/depcheck-to-knip
• feature/https
• fix-audit-ci
• fix-audit-ci-matrix
• fix-bom-encodding
• fix-cli-doc-generator
• fix-cpation-in-example
• fix-custom-middleware-configuration-reference
• fix-documentation-workflow
• fix-flex-change
• fix-jsdoc-build
• fix-link-to-next-doc
• fix-no_cache-error
• fix-npm-test
• fix-package-find-in-shrink
• fix-package-jsons
• fix-package-lock
• fix-security-audit-setup-node-action-version
• fix-security-audits
• fix-security-scan
• fix-serve-framework-version-console
• fix-shrinkwrap-generation
• fix-shrinkwrap-generation-alt
• fix-shrinkwrap-generator
• fix-vitepress-integrity-check
• fix-vulnerabilities
• fix/allow-component.ts
• fix/bind-to-v4-loopback
• fix/build-reader-getReaderForResource
• fix/build-sig-include-ui5-project-version
• fix/cli-certificate-wording
• fix/custom-tasks-changedProjectResourcePaths
• fix/delta-merge-resurrected-resources
• fix/dependabot-auto-merge-force-push
• fix/dependabot-group-schema
• fix/dependency-set-change-cache-staleness
• fix/documentation-build-script
• fix/fs-resource-structured-clone
• fix/fs-watch-in-containers
• fix/generateManifest-middleware
• fix/gh-pages-deployment
• fix/jsdoc/AvoidErrorForSymbolWithNoEvents
• fix/npm-config-process-args
• fix/project-watcher-cancel-settle-timer
• fix/request-manager-unresolved-reads
• fix/serve-checkout-race
• fix/serve-resources-node-api
• fix/server-destroy-teardown-race
• fix/server-polling-watcher-test
• fix/server-remove-project-cache-import
• fix/ui5-tree-config-dependency-definition
• fix/vitepress-building
• fix/vulnerability-updates
• fix/watcher-concurrent-native-fallback
• fixFlexBundle
• fork-ajv-errors
• generate-certificate-command
• improve-ci
• improve-test-reinitializeMissingDependency
• improve-test-setup
• in-range-updates
• infra/add-jsconfig
• infra/consolidate-matrix
• interactive-console-changes
• interactive-console-info-log
• jsdoc-to-markdow
• lbt-fix-raw-module-order
• lbt-improvements-upport
• main
• main-adjust-readme
• main-fix-audit
• migration-guide-v5
• node-engine/22.20.0-22.22.2
• offer-configPath-to-workspace-yaml
• override-tar-version
• poc-generate-doc-extract-schema
• poc-json-yargs-doc-generator
• poc-rfc-modules-integration
• prevent-prod-deps-internal-packages
• readme-add-ui5con2025-recording
• refactor-MiddlewareManager
• refactor-datadir-consolidation
• refactor-e2e-node-stream-zip
• refactor-migrate-to-package-lock
• refactor-release-config
• refactor-release-please-setup
• refactor-replace-port-scanner-native
• refactor-reuse
• refactor-test-fixtures
• refactor/CacheManager
• refactor/add-task-build-sig
• refactor/benchmark-tool-more-options
• refactor/handle-project-changes
• refactor/http-server-creation
• refactor/interactive-console-cursor-restore
• refactor/library-preload-pattern
• refactor/lint-findings
• refactor/logger-log-update-v8
• refactor/manifestCreator-omit-supportedThemes
• refactor/middleware-built-resource-access
• refactor/no-write-flag
• refactor/remove-projectbuildcache-create-factory
• refactor/resolve-ui5-data-dir
• refactor/scope-cli-options
• refactor/serve-cache-validation
• refactor/serve-error-handling-2
• refactor/server-stale-state
• refactor/share-task-filter-options
• refactor/shrinkwrap-to-lockfile-convertion
• refactor/split-ProjectBuilder-integration-test
• refactor/version-info-log-component-path
• release-please--branches--main
• remove-examples
• remove-experimental-css-option
• remove-in-solidarity-bot-config
• remove-testRunner-middleware
• replace-chokidar-with-parcel-watcher
• rfc-bundle-info-preload
• rfc-component-type
• rfc-incremental-build
• rfc-tooling-modules-integration
• run-generateVersionInfo-by-default
• run-generateVersionInfo-by-default-2
• security-audit-scan-update
• security/fix-GHSA-7h2j-956f-4vf2
• server-security-notice
• setup-coveralls-monorepo
• specify-language-in-example
• split-dependabot-groups
• standards/ci-node-version
• suppress-unit-test-log-output
• test/build-server-delta-build-abort
• test/build-server-split
• test/buildthemes-theme-delta-tests
• test/cache-version-not-hardcoded
• test/custom-task-build-signature
• test/dependency-change-failing
• test/e2e-tests
• test/fix-flaky-build-server-force-cache-race
• test/generateBundle-core-version-staleness
• test/minify-differentialBuild-gaps
• test/mock-parcel-watcher
• trigger-alpha-1-release
• ui5-serve-console-output
• ui5-serve-console-output-followup
• up-port/v4-fix-initialize-error-log
• update-audit
• update-benchmarking-docs
• update-commitlint-check
• update-dependencies
• update-deps
• update-package-download-version
• update-ui5-data-dir-docs
• vitepress-remove-engine-strict
• zzz

Build # 37768472621

Build Type

Pull #1640

github

Committed by web-flow

Commit Message

Merge f2d6adef1 into 35385526b

Pull Request Pull Request #1640: refactor: Add security scan for multiple scopes in CI workflow

Coverage Stats

7350 of 8087 branches covered (90.89%)

Branch coverage included in aggregate %.

14056 of 14640 relevant lines covered (96.01%)

5288.26 hits per line