馃摝 fluttercandies/seeko
馃搶 Commit SHA: 3ff4117d67a22ed1341213505389c553216c1c8d
馃暅 Report generated at: 2026-09-02T06:41:58.270Z
馃攳 Overview
| Severity |
Count |
| 馃敶 High |
2 |
| 馃煛 Medium |
1 |
| 馃煝 Low |
17 |
馃搧 Details
馃搫 .github/workflows/pages.yml - 馃敶High(2) 馃煝Low(1)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃敶 High |
excessive-permissions |
High |
Audit: overly broad permissions: pages: write is overly broad at the workflow level
Remediation: view audit
|
| 2 |
Severity |
Audit Rule |
Confidence |
| 馃敶 High |
excessive-permissions |
High |
Audit: overly broad permissions: id-token: write is overly broad at the workflow level
Remediation: view audit
|
| 3 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/release.yml - 馃煛Medium(1) 馃煝Low(1)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煛 Medium |
excessive-permissions |
Medium |
Audit: overly broad permissions: default permissions used due to no permissions: block
Remediation: view audit
|
| 2 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/cockpit-macos.yml - 馃煝Low(1)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/example-distribution.yml - 馃煝Low(7)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 2 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 3 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 4 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 5 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 6 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 7 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/nightly.yml - 馃煝Low(2)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 2 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/platforms.yml - 馃煝Low(1)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/qualification-macos.yml - 馃煝Low(1)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃搫 .github/workflows/quality.yml - 馃煝Low(3)
| 1 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 2 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
| 3 |
Severity |
Audit Rule |
Confidence |
| 馃煝 Low |
artipacked |
Low |
Audit: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
Remediation: view audit
|
馃摝 fluttercandies/seeko
馃搶 Commit SHA: 3ff4117d67a22ed1341213505389c553216c1c8d
馃暅 Report generated at: 2026-09-02T06:41:58.270Z
馃攳 Overview
馃搧 Details
馃搫 .github/workflows/pages.yml - 馃敶High(2) 馃煝Low(1)
Remediation: view audit
.github/workflows/pages.yml#L16
Audit: pages: write is overly broad at the workflow level
Remediation: view audit
.github/workflows/pages.yml#L17
Audit: id-token: write is overly broad at the workflow level
Remediation: view audit
.github/workflows/pages.yml#L29-L30
Audit: does not set persist-credentials: false
馃搫 .github/workflows/release.yml - 馃煛Medium(1) 馃煝Low(1)
Remediation: view audit
.github/workflows/release.yml#L1-L109
Audit: default permissions used due to no permissions: block
Remediation: view audit
.github/workflows/release.yml#L22-L23
Audit: does not set persist-credentials: false
馃搫 .github/workflows/cockpit-macos.yml - 馃煝Low(1)
Remediation: view audit
.github/workflows/cockpit-macos.yml#L20-L21
Audit: does not set persist-credentials: false
馃搫 .github/workflows/example-distribution.yml - 馃煝Low(7)
Remediation: view audit
.github/workflows/example-distribution.yml#L27-L28
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/example-distribution.yml#L73-L74
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/example-distribution.yml#L120-L121
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/example-distribution.yml#L167-L168
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/example-distribution.yml#L213-L214
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/example-distribution.yml#L260-L261
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/example-distribution.yml#L323-L324
Audit: does not set persist-credentials: false
馃搫 .github/workflows/nightly.yml - 馃煝Low(2)
Remediation: view audit
.github/workflows/nightly.yml#L21-L22
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/nightly.yml#L59-L60
Audit: does not set persist-credentials: false
馃搫 .github/workflows/platforms.yml - 馃煝Low(1)
Remediation: view audit
.github/workflows/platforms.yml#L52-L53
Audit: does not set persist-credentials: false
馃搫 .github/workflows/qualification-macos.yml - 馃煝Low(1)
Remediation: view audit
.github/workflows/qualification-macos.yml#L22-L23
Audit: does not set persist-credentials: false
馃搫 .github/workflows/quality.yml - 馃煝Low(3)
Remediation: view audit
.github/workflows/quality.yml#L22-L23
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/quality.yml#L59-L60
Audit: does not set persist-credentials: false
Remediation: view audit
.github/workflows/quality.yml#L113-L114
Audit: does not set persist-credentials: false