StepSecurity Bot
StepSecurity Bot
### Analysis ```yml Action Name: arduino/report-size-deltas Action Type: Docker GITHUB_TOKEN Matches: github-token,github_token,token,GITHUB_TOKEN Stars: 8 Private: false Forks: 5 ```
### Analysis ```yml Action Name: mnajdova/github-action-required-labels Action Type: Node GITHUB_TOKEN Matches: GITHUB_TOKEN Top language: JavaScript Stars: 0 Private: false Forks: 0 ``` ### action-security.yml
### Analysis ```yml Action Name: svenstaro/upload-release-action Action Type: Node GITHUB_TOKEN Matches: repo_token,token,GITHUB_TOKEN,TOKEN Top language: TypeScript Stars: 349 Private: false Forks: 61 ``` ### Endpoints Found |Endpoint | Permission| |---------| ----------|...
This action's `action.yml` & `README.md` doesn't contains any reference to GITHUB_TOKEN ### action-security.yml ```yaml name: "cargo-cache" # RustCrypto/actions/cargo-cache # GITHUB_TOKEN not used ```
### Analysis ```yml Action Name: jupyterhub/repo2docker-action Action Type: Docker GITHUB_TOKEN Matches: token,github-token,GITHUB_TOKEN Stars: 117 Private: false Forks: 20 ```
### Analysis ```yml Action Name: reviewdog/action-staticcheck Action Type: Composite GITHUB_TOKEN Matches: github_token,GITHUB_TOKEN,token Stars: 20 Private: false Forks: 2 ```
### Analysis ```yml Action Name: nrwl/nx-set-shas Action Type: Composite GITHUB_TOKEN Matches: GITHUB_TOKEN,token Stars: 65 Private: false Forks: 19 ```
This action's `action.yml` & `README.md` doesn't contains any reference to GITHUB_TOKEN ### action-security.yml ```yaml name: markdownlint-cli # nosborn/github-action-markdown-cli # GITHUB_TOKEN not used ```
This action's `action.yml` & `README.md` doesn't contains any reference to GITHUB_TOKEN ### action-security.yml ```yaml name: Install Cygwin Action # cygwin/cygwin-install-action # GITHUB_TOKEN not used ```
This action's `action.yml` & `README.md` doesn't contains any reference to GITHUB_TOKEN ### action-security.yml ```yaml name: 'gabrielbb/xvfb-action' # GabrielBB/xvfb-action # GITHUB_TOKEN not used ```