Ensure top-level permissions are not set to write-all
Ensure top-level permissions are not set to write-all on on(Build)
checkov.github/workflows/build.yml:0
Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
semgrep.claude/skills/design-ui/references/stitch-setup.md:92
Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
semgrepcore/data/src/commonMain/kotlin/thisissadeghi/data/local/pref/PreferencesManager.kt:29