Add security reporting guidance

d2cd470

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Semgrep Code - grafana

semgrep-cloud-platform/scan

Display info box when PR contains unsigned commits on: pull_request_target

signed-commits

Display info box when PR contains unsigned commits on: pull_request_target

signed-commits

Changelog Check on: pull_request 1

check-changelog

CodeQL on: pull_request 3

Analyze (go)

Analyze (javascript-typescript)

Analyze (python)

Analyze (actions)

Display info box when PR contains unsigned commits on: pull_request

signed-commits

compare-helm-with-jsonnet on: pull_request 1

prepare

goversion

compare-manifests

Display info box when PR contains unsigned commits on: pull_request

signed-commits

ci on: pull_request 1

prepare

test-docs / test-docs

goversion

lint-jsonnet

lint-helm

warmup-go-build-cache-unit-tests

warmup-go-build-cache-image-and-lint

warmup-go-build-cache-integration-tests

test (0, 5)

test (nopools, 0, 5)

test (1, 5)

test (nopools, 1, 5)

test (2, 5)

test (nopools, 2, 5)

test (3, 5)

test (nopools, 3, 5)

test (4, 5)

test (nopools, 4, 5)

build-race-enabled-image

lint

build-metaconvert-image

build-mimir-image

build-query-tee-image

build-mimirtool-image

build-copyblocks-image

build-dist (linux, amd64)

build-dist (linux, arm64)

build-dist (darwin, amd64)

build-dist (darwin, arm64)

build-dist (windows, amd64)

build-dist (windows, arm64)

build-dist (freebsd, amd64)

build-dist (freebsd, arm64)

notify-streamingpromql-failures

integration (0, 20)

integration (1, 20)

integration (2, 20)

integration (3, 20)

integration (4, 20)

integration (5, 20)

integration (6, 20)

integration (7, 20)

integration (8, 20)

integration (9, 20)

integration (10, 20)

integration (11, 20)

integration (12, 20)

integration (13, 20)

integration (14, 20)

integration (15, 20)

integration (16, 20)

integration (17, 20)

integration (18, 20)

integration (19, 20)

build-packages

build

deploy

release

send-slack-notification-on-automated-vendoring

TruffleHog Secret Scanning on: pull_request 2

TruffleHog Secret Scan / trufflehog-scan

TruffleHog Secret Scan / Send TruffleHog metrics to Prometheus via Grafana Bench

zizmor GitHub Actions static analysis on: pull_request 1

Check whether there are things to scan

Run zizmor / job-workflow-ref

Run zizmor / Generate and upload zizmor results 🌈

Run zizmor / Send zizmor metrics to Prometheus via Grafana Bench

Run zizmor / Delete branch with dangerous-trigger vulnerability

Build and Push mimir-build-image on: pull_request

Prepare

Build image

build_and_push

helm-ci on: pull_request 1

call-lint / Lint Code Base

call-lint-test / lint-test

prepare

conftest

Socket Security

Socket Security: Project Report

Code scanning results

zizmor

CodeQL

GitHub Advanced Security / CodeQL succeeded Aug 18, 2026 in 3s

No new alerts in code changed by this pull request

View all branch alerts.

Loading

Re-running checks...