← Scan another repo

github.com/EbookFoundation/free-programming-books

@ a7a83950327c

Submitted 8/4/2026, 2:37:33 AM · Status: ok

Risk grade
A
4 / 100
Findings
2
0 critical0 high2 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 2 of 2 findings

Findings

  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Comment on the pull request)
    checkov.github/workflows/comment-pr.yml:11
  • The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty.
    The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. on on(Stale handler)
    checkov.github/workflows/stale.yml:7

This report is public.