Security suite failed (main @ 5e10038)

[github-actions]

The root mise run security suite failed in GitHub Actions. Use the log tail below and reproduce locally with the same command.

Field	Value
Workflow run	Security #24
Ref	refs/heads/main
SHA	5e10038c7e28179b302ac4de78b709795aeba3ce
Actor	@krokoko
Event	schedule

Log tail (last 200 lines)

�[32m[//:security:secrets]�[0m �[1m$ gitleaks git . --no-banner --redact --log-opts="HEAD"�[0m
�[90m12:13PM�[0m �[32mINF�[0m �[1m311 commits scanned.�[0m
�[90m12:13PM�[0m �[32mINF�[0m �[1mscanned ~24128988 bytes (24.13 MB) in 2.56s�[0m
�[90m12:13PM�[0m �[32mINF�[0m �[1mno leaks found�[0m
�[36m�[1m[//:security:deps]�[0m �[1m$ osv-scanner scan --lockfile agent/uv.lock --lockfile yarn.lock --lockfile integrations/jira-forge-app/package-lock.json�[0m
Starting filesystem walk for root: /
Scanned /home/runner/work/sample-autonomous-cloud-coding-agents/sample-autonomous-cloud-coding-agents/agent/uv.lock file and found 129 packages
Scanned /home/runner/work/sample-autonomous-cloud-coding-agents/sample-autonomous-cloud-coding-agents/yarn.lock file and found 1212 packages
Scanned /home/runner/work/sample-autonomous-cloud-coding-agents/sample-autonomous-cloud-coding-agents/integrations/jira-forge-app/package-lock.json file and found 52 packages
End status: 0 dirs visited, 3 inodes visited, 3 Extract calls, 34.35177ms elapsed, 34.351837ms wall time

No issues found
�[35m�[1m[//:security:sast]�[0m �[1m$ semgrep scan --config auto --config p/python --config p/typescript --config p/owasp-top-ten --config p/security-audit --error --quiet .�[0m
                  
                  
┌────────────────┐
│ 1 Code Finding │
└────────────────┘
                                                
    cdk/src/handlers/linear-webhook-processor.ts
    ❯❱ javascript.lang.security.insecure-object-assign.insecure-object-assign
          ❰❰ Blocking ❱❱
          Depending on the context, user control data in `Object.assign` can cause web response to include
          data that it should not have or can lead to a mass assignment vulnerability.                    
          Details: https://sg.run/2R0D                                                                    
                                                                                                          
          926┆ Object.assign(channelMetadata, vaultMetadata(resolved));

�[35m�[1m[//:security:sast]�[0m �[31mERROR�[0m task failed

Close this issue after mise run security succeeds on main (or the branch you merge to).