r12habh/ActionScope

docs: Add a GitHub Environments hardening guide 10 days ago

documentation help wanted good first issue security

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

test: Detect missing scan flags in the CLI reference 10 days ago

documentation help wanted good first issue ci

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add CloudFormation and SAM IAM evidence guide 10 days ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

test: Validate action.yml input and output metadata 10 days ago

help wanted good first issue marketplace ci

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add a complete GitHub Action inputs and outputs reference 10 days ago

documentation help wanted good first issue marketplace

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add contributor guide for compromised action database entries 10 days ago

documentation help wanted good first issue security compromised-action

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add artifact poisoning detector guide 10 days ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

feat: Add a pre-commit hook 10 days ago

enhancement help wanted v0.6.0

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Explain --max-policy-files directory exemptions 10 days ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add AI agent detector tests for Gemini, OpenCode, and Continue 4 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add output formats reference page 4 months ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add script injection tests for issue_comment and discussion events 4 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add AI agent prompt injection detector guide 4 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add Docker action pinning edge-case tests 4 months ago

enhancement help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Record demo GIF and add it to the README 4 months ago

documentation help wanted

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add docs dependency extra and MkDocs build instructions 4 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add artifact poisoning test for dawidd6/action-download-artifact 4 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add delta reporting guide for --save-state and --load-state 4 months ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add script injection detector guide 4 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add step-by-step tutorial for scanning your first repo 4 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Improve error messages when policy file not found 4 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add iam:CreateLoginProfile to ALWAYS_CRITICAL set 4 months ago

enhancement good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

Expand AWS privilege escalation detector coverage 4 months ago

good first issue new-check security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

Open Issues Need Help