github.com/microsoft/markitdown
Submitted 8/4/2026, 10:25:52 AM · Status: ok
Risk grade
F
100 / 100
Findings
16
0 critical10 high4 medium2 low0 info0 on CISA KEV0ATT&CK
Showing 16 of 16 findings
Findings
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Detected facebook-access-token: Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposureDiscovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.gitleaks
- Ensure that HEALTHCHECK instructions have been added to container imagesEnsure that HEALTHCHECK instructions have been added to container images on /Dockerfile.checkovDockerfile:1
- Ensure that HEALTHCHECK instructions have been added to container imagesEnsure that HEALTHCHECK instructions have been added to container images on /packages/markitdown-mcp/Dockerfile.checkovpackages/markitdown-mcp/Dockerfile:1
- Ensure top-level permissions are not set to write-allEnsure top-level permissions are not set to write-all on on(tests)checkov.github/workflows/tests.yml:0
- Ensure top-level permissions are not set to write-allEnsure top-level permissions are not set to write-all on on(pre-commit)checkov.github/workflows/pre-commit.yml:0
- No HEALTHCHECK definedYou should add HEALTHCHECK instruction in your docker container images to perform the health check on running containers.trivyDockerfile:0
- No HEALTHCHECK definedYou should add HEALTHCHECK instruction in your docker container images to perform the health check on running containers.trivypackages/markitdown-mcp/Dockerfile:0
This report is public.