← Scan another repo

github.com/valyala/fasthttp

@ 0bdb977009a5

Submitted 8/4/2026, 1:45:44 AM · Status: ok

Risk grade
C
42 / 100
Findings
48
0 critical3 high3 medium0 low42 info0 on CISA KEV0ATT&CK
Showing 48 of 48 findings

Findings

  • Detected private-key: Identified a Private Key, which may compromise cryptographic security and sensitive data encryption
    Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
    gitleaks
  • Detected private-key: Identified a Private Key, which may compromise cryptographic security and sensitive data encryption
    Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
    gitleaks
  • Committed PEM private-key material (a "-----BEGIN ... PRIVATE KEY-----" block). Anyone with repo read access holds the key: rotate it, remove it from history, and load keys at runtime from a secret st
    Committed PEM private-key material (a "-----BEGIN ... PRIVATE KEY-----" block). Anyone with repo read access holds the key: rotate it, remove it from history, and load keys at runtime from a secret store / mounted volume instead. (First-party socbox rule; Apache-2.0.)
    semgrepexamples/fileserver/ssl-cert-snakeoil.key:1
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(CIFuzz)
    checkov.github/workflows/cifuzz.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Security)
    checkov.github/workflows/security.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Test)
    checkov.github/workflows/test.yml:0

This report is public.