Search results

Align Dangerous Workflow check with CodeQL rules, or defer to it entirely

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

Stale

Status: Open.

#4490 In ossf/scorecard;

· stone-z opened on Jan 15, 2025

Dangerous Workflow: some user input are not being detected as untrusted input.

check/Dangerous-workflow

good first issueGood for newcomersGood for newcomers

kind/enhancementNew feature or requestNew feature or request

Status: Open.

#3915 In ossf/scorecard;

· diogoteles08 opened on Mar 4, 2024

Feature: Check for usage of on: workflow_run trigger

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

needs discussion

Stale

Status: Open.

#3861 In ossf/scorecard;

· raghavkaul opened on Feb 7, 2024

dangerous-workflow: check usage of $GITHUB_ENV

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

Stale

Status: Open.

#3830 In ossf/scorecard;

· spencerschrock opened on Jan 30, 2024

Feature: Fork pull request workflows from outside collaborators

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

kind/new-checkNew check for scorecardNew check for scorecard

Stale

Status: Open.

#3827 In ossf/scorecard;

· irsl opened on Jan 29, 2024

Feature: dangerous CI

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

kind/new-checkNew check for scorecardNew check for scorecard

Stale

Status: Open.

#3630 In ossf/scorecard;

· laurentsimon opened on Oct 30, 2023

BUG: Dangerous-Workflow doesn't trigger on <code>toJSON(github.event)</code>

check/Dangerous-workflow

good first issueGood for newcomersGood for newcomers

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#3554 In ossf/scorecard;

· pnacht opened on Oct 10, 2023

Feature: Dangerous workflow warns when script injection + secrets used

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

Stale

Status: Open.

#3277 In ossf/scorecard;

· laurentsimon opened on Jul 18, 2023

Feature: Dangerous Workflows - Imposter Commit Check

check/Dangerous-workflow

check/Pinned-Dependencies

kind/enhancementNew feature or requestNew feature or request

kind/new-checkNew check for scorecardNew check for scorecard

Stale

Status: Open.

#2733 In ossf/scorecard;

· wlynch opened on Mar 8, 2023

Dangerous workflows: check for declared branches

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

Stale

Status: Open.

#2406 In ossf/scorecard;

· laurentsimon opened on Oct 27, 2022

Dangerous workflows: detect refs

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

Stale

Status: Open.

#2404 In ossf/scorecard;

· laurentsimon opened on Oct 26, 2022

Feature: support wildcard in dangerous workflow

check/Dangerous-workflow

kind/enhancementNew feature or requestNew feature or request

Stale

Status: Open.

#2236 In ossf/scorecard;

· laurentsimon opened on Sep 8, 2022