[CI/CD Security] fluttercandies/toto - Issue Report

## 📦 fluttercandies/toto 

📌 Commit SHA: [b3d606873890694b900b467916b2412cfc340886](https://github.com/fluttercandies/toto/tree/b3d606873890694b900b467916b2412cfc340886) 

🕜 Report generated at: 2026-09-02T06:38:04.855Z

## 🔍 Overview

| Severity | Count |
|:---|:---|
| 🟡 Medium | 1 |

## 📁 Details

<details>
<summary>📄 .github/dependabot.yml - 🟡Medium(1)</summary>

<br/>

<table><tbody>
<tr>
<td align="center" rowspan="2"><strong>1</strong></td>
<td align="center"><strong>Severity</strong></td>
<td align="center"><strong>Audit Rule</strong></td>
<td align="center"><strong>Confidence</strong></td>
</tr>
<tr>
<td align="center">🟡 Medium</td>
<td align="center">dependabot-cooldown</td>
<td align="center">High</td>
</tr>
<tr>
<td colspan="4">
<strong>Audit</strong>: insufficient cooldown in Dependabot updates: insufficient implicit default-days (less than 7)
<br/><strong>Remediation</strong>: <a href="https://docs.zizmor.sh/audits/#dependabot-cooldown">view audit</a>
</td>
</tr>
</tbody></table>


- [.github/dependabot.yml#L4](https://github.com/fluttercandies/toto/blob/b3d606873890694b900b467916b2412cfc340886/.github/dependabot.yml#L4)
  **Audit**: insufficient implicit default-days (less than 7)
  
  ```yaml
  package-ecosystem: github-actions
  ```
  
---

<br/><br/>


</details>

<br/>

1	Severity	Audit Rule	Confidence
1	🟡 Medium	dependabot-cooldown	High
Audit: insufficient cooldown in Dependabot updates: insufficient implicit default-days (less than 7) Remediation: view audit

Navigation Menu

Uh oh!

[CI/CD Security] fluttercandies/toto - Issue Report #85

📦 fluttercandies/toto

🔍 Overview

📁 Details

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Uh oh!

[CI/CD Security] fluttercandies/toto - Issue Report #85

Description

📦 fluttercandies/toto

🔍 Overview

📁 Details

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions