← Scan another repo

github.com/tesseract-ocr/tesseract

@ 64ed93b68c01

Submitted 8/4/2026, 10:25:56 AM · Status: ok

Risk grade
C
30 / 100
Findings
15
0 critical0 high15 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 15 of 15 findings

Findings

  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(autotools-macos)
    checkov.github/workflows/autotools-macos.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(autotools-openmp)
    checkov.github/workflows/autotools-openmp.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(autotools)
    checkov.github/workflows/autotools.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(CIFuzz)
    checkov.github/workflows/cifuzz.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(cmake-win64)
    checkov.github/workflows/cmake-win64.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(cmake)
    checkov.github/workflows/cmake.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(CodeQL)
    checkov.github/workflows/codeql-analysis.yml:43
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Cross build for Windows)
    checkov.github/workflows/installer-for-windows.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(msys2)
    checkov.github/workflows/msys2.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(sw)
    checkov.github/workflows/sw.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(unittest-disablelegacy)
    checkov.github/workflows/unittest-disablelegacy.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(unittest-macos)
    checkov.github/workflows/unittest-macos.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(unittest)
    checkov.github/workflows/unittest.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(vcpkg)
    checkov.github/workflows/vcpkg.yml:0
  • The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty.
    The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. on on(Cross build for Windows)
    checkov.github/workflows/installer-for-windows.yml:9

This report is public.