Skip to content

[CI/CD Security] fluttercandies/seeko - Issue Report#90

Description

@github-actions

馃摝 fluttercandies/seeko

馃搶 Commit SHA: 3ff4117d67a22ed1341213505389c553216c1c8d

馃暅 Report generated at: 2026-09-02T06:41:58.270Z

馃攳 Overview

Severity Count
馃敶 High 2
馃煛 Medium 1
馃煝 Low 17

馃搧 Details

馃搫 .github/workflows/pages.yml - 馃敶High(2) 馃煝Low(1)
1 Severity Audit Rule Confidence
馃敶 High excessive-permissions High
Audit: overly broad permissions: pages: write is overly broad at the workflow level
Remediation: view audit



2 Severity Audit Rule Confidence
馃敶 High excessive-permissions High
Audit: overly broad permissions: id-token: write is overly broad at the workflow level
Remediation: view audit



3 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/release.yml - 馃煛Medium(1) 馃煝Low(1)
1 Severity Audit Rule Confidence
馃煛 Medium excessive-permissions Medium
Audit: overly broad permissions: default permissions used due to no permissions: block
Remediation: view audit



2 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/cockpit-macos.yml - 馃煝Low(1)
1 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/example-distribution.yml - 馃煝Low(7)
1 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



2 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



3 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



4 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



5 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



6 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



7 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/nightly.yml - 馃煝Low(2)
1 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



2 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/platforms.yml - 馃煝Low(1)
1 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/qualification-macos.yml - 馃煝Low(1)
1 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



馃搫 .github/workflows/quality.yml - 馃煝Low(3)
1 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



2 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit



3 Severity Audit Rule Confidence
馃煝 Low artipacked Low
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit




Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions