← Scan another repo

github.com/gulpjs/gulp

@ 61f22dc11bb1

Submitted 8/4/2026, 10:28:02 AM · Status: ok

Risk grade
A
4 / 100
Findings
2
0 critical0 high2 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 2 of 2 findings

Findings

  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(release)
    checkov.github/workflows/release.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(dev)
    checkov.github/workflows/dev.yml:0

This report is public.