Workflows triggered by Dependabot on the "push" event run with read-only access. Uploading Code Scanning results requires write access. To use Code Scanning with Dependabot, please ensure you are using the "pull_request" event for this workflow and avoid triggering on the "push" event for Dependabot branches. See https://docs.github.com/en/code-security/secure-coding/configuring-code-scanning#scanning-on-push for more information on how to configure these events.

apps/admin_audit/lib/Actions/Action.php:62:16: TaintedHtml: Detected tainted HTML (see https://psalm.dev/245)

apps/files_external/lib/Config/ConfigAdapter.php:85:50: TaintedCallable: Detected tainted text (see https://psalm.dev/243)

apps/files_external/lib/Lib/Storage/SFTP.php:237:17: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)

apps/files_external/lib/Lib/Storage/SFTP.php:258:19: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)

apps/files_external/lib/Lib/Storage/SFTP.php:399:22: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)

apps/files_sharing/lib/Controller/ShareController.php:463:35: TaintedCookie: Detected tainted cookie (see https://psalm.dev/257)

apps/theming/lib/IconBuilder.php:137:40: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)

apps/theming/lib/IconBuilder.php:235:28: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)

lib/base.php:205:12: TaintedHeader: Detected tainted header (see https://psalm.dev/256)

lib/base.php:287:12: TaintedHeader: Detected tainted header (see https://psalm.dev/256)