← Scan another repo

github.com/ThisIsSadeghi/KMPilot

@ 821f9efad7df

Submitted 8/3/2026, 4:21:08 PM · Status: ok

Risk grade
B
18 / 100
Findings
4
0 critical1 high3 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 4 of 4 findings

Findings

  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Build)
    checkov.github/workflows/build.yml:0
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrep.claude/skills/design-ui/references/stitch-setup.md:92
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrepcore/data/src/commonMain/kotlin/thisissadeghi/data/local/pref/PreferencesManager.kt:29

This report is public.