← Scan another repo

github.com/valinet/ExplorerPatcher

@ 0a88a6e0ef6b

Submitted 8/4/2026, 10:28:01 AM · Status: ok

Risk grade
A
6 / 100
Findings
3
0 critical0 high3 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 3 of 3 findings

Findings

  • The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty.
    The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty. on on(Build)
    checkov.github/workflows/build.yml:14
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrepep_gui/GUI.h:8
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrepep_setup/ep_setup.c:4

This report is public.