Skip to content

fix: Prevent mutation of cached feature resolution results #3515

fix: Prevent mutation of cached feature resolution results

fix: Prevent mutation of cached feature resolution results #3515

Re-run triggered August 10, 2026 10:14
Status Success
Total duration 5m 16s
Artifacts

security.yml

on: pull_request
Dependency Security Scan
5m 11s
Dependency Security Scan
Matrix: CodeQL Analysis
Matrix: govulncheck
Fit to window
Zoom out
Zoom in

Annotations

19 errors and 5 warnings
Go Vulnerability Check (feast-operator)
Process completed with exit code 3.
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.String
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.QuickSpan
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.IsNormalString
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.Bytes
Go Vulnerability Check (feast-operator)
utils.ApplyFeastYamlAndVerify calls exec.Command, which eventually calls transport.http2Client.GracefulClose
Go Vulnerability Check (feast-operator)
utils.ApplyFeastYamlAndVerify calls exec.Command, which eventually calls transport.http2Client.Close
Go Vulnerability Check (feast-operator)
utils.ApplyFeastYamlAndVerify calls exec.Command, which eventually calls transport.NewHTTP2Client
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.Stream.ReadMessageHeader
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ServerStream.Read
Go Vulnerability Check (go-feature-server)
embedded.OnlineFeatureService.StartGrpcServerWithLogging calls grpc.Server.Serve, which eventually calls transport.NewServerTransport
Go Vulnerability Check (go-feature-server)
registry.file_feast_registry_RegistryServer_proto_rawDescGZIP calls sync.Once.Do, which eventually calls transport.NewHTTP2Client
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Write
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.TrailersOnly
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.RecvCompress
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Read
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Header
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Close
Dependency Security Scan
Process completed with exit code 1.
Go Vulnerability Check (feast-operator)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
CodeQL Analysis (javascript-typescript)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
CodeQL Analysis (python)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Go Vulnerability Check (go-feature-server)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Security Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/