asamassekou10/ship-safe

Absence-rule lookaheads: one confirmed false positive, several fragile about 9 hours ago

bug help wanted tests cli agents

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Give rules a language scope so JS patterns stop running against Python and Ruby about 20 hours ago

enhancement help wanted good first issue tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect MCP OAuth token passthrough and confused deputy proxy configs about 20 hours ago

help wanted good first issue security rule cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Scan A2A agent cards for poisoning, missing auth, and callback SSRF about 20 hours ago

help wanted good first issue security rule cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document MCP allowlist bypass findings and safe config examples 2 days ago

documentation help wanted good first issue cli docs agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add npm provenance and trusted publishing checks for release workflows 3 days ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Flag unsafe AI model downloads and unpinned Hugging Face usage 3 days ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect suspicious Python package install hooks 3 days ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect connection-string env passthrough in MCP configs 3 days ago

help wanted good first issue agent security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect unpinned AI GitHub Actions with broad permissions 3 days ago

help wanted good first issue security rule cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Improve Supabase and Auth0 secret patterns 3 days ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add regression fixture for MCP connection-string passthrough 3 days ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add agent config injection regression fixtures 3 days ago

help wanted good first issue agent tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add GitLab CI security gate example 3 days ago

documentation help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add MCP tool-call allowlist bypass fixtures 3 days ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document safe MCP env handling examples 3 days ago

documentation help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document project-local custom agent plugins 3 days ago

documentation help wanted good first issue agent cli docs agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document GitHub Actions release and npm publish flow 3 days ago

documentation help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add CLI smoke test for packaged npx usage 3 days ago

help wanted good first issue tests cli

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add changelog note for MCP and Kimi K3 rule coverage 3 days ago

documentation help wanted good first issue

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Improve dashboard empty states for first-time users 4 days ago

help wanted good first issue webapp

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add Kimi K3 tool-call security fixtures 4 days ago

help wanted good first issue agent tests

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add MCP env secret passthrough detection 14 days ago

help wanted good first issue agent security rule

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Open Issues Need Help