← Scan another repo

github.com/DietrichGebert/ponytail

@ 16f29800fd26

Submitted 8/4/2026, 10:25:54 AM · Status: ok

Risk grade
A
4 / 100
Findings
2
0 critical0 high2 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 2 of 2 findings

Findings

  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(test)
    checkov.github/workflows/test.yml:0
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrepbenchmarks/agentic/judge.py:44

This report is public.