← Scan another repo

github.com/zxing/zxing

@ 19aa2d825441

Submitted 8/4/2026, 10:28:00 AM · Status: ok

Risk grade
B
10 / 100
Findings
5
0 critical0 high5 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 5 of 5 findings

Findings

  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(CodeQL)
    checkov.github/workflows/codeql-analysis.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Test Java 17)
    checkov.github/workflows/test_java_17.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Test Java 21)
    checkov.github/workflows/test_java_21.yml:0
  • Ensure top-level permissions are not set to write-all
    Ensure top-level permissions are not set to write-all on on(Test Java 8)
    checkov.github/workflows/test_java_8.yml:0
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrepandroid/src/com/google/zxing/client/android/Intents.java:279

This report is public.