Owner
sisaku-security
2 indexed repositories · View on GitHub
-
sisakulint
CI-Friendly static linter with autofix, SAST, semantic analysis for GitHub Actions
Go · 48 stars
-
homebrew-sisakulint
homebrew tap repo
Ruby · 13 stars
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
sisaku-security/sisakulint#648 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
sisaku-security/sisakulint#647 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
sisaku-security/sisakulint#646 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 94/100
sisaku-security/sisakulint#645 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#634 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
sisaku-security/sisakulint#630 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 52/100
sisaku-security/sisakulint#629 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
sisaku-security/sisakulint#623 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
sisaku-security/sisakulint#622 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
sisaku-security/sisakulint#620 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
sisaku-security/sisakulint#619 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
sisaku-security/sisakulint#617 ·
-
action-list: reusable workflows called with `jobs.<job_id>.uses` are never matched against the list Open
Difficulty 4/5 3-5 days Newbie friendliness 56/100
sisaku-security/sisakulint#616 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#615 ·
-
area/cache bug
Difficulty 3/5 1-2 days Newbie friendliness 78/100
sisaku-security/sisakulint#613 ·
-
area/taint-analysis bug
Difficulty 3/5 1-2 days Newbie friendliness 74/100
sisaku-security/sisakulint#612 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#611 ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
sisaku-security/sisakulint#610 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
sisaku-security/sisakulint#604 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 68/100
sisaku-security/sisakulint#603 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 72/100
sisaku-security/sisakulint#602 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 58/100
sisaku-security/sisakulint#601 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#598 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 68/100
sisaku-security/sisakulint#594 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#593 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 78/100
sisaku-security/sisakulint#587 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 72/100
sisaku-security/sisakulint#586 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
sisaku-security/sisakulint#585 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 65/100
sisaku-security/sisakulint#584 ·
-
False positive + detection gap: parser doesn't recognize GitHub Actions "parallel:" step syntax Open
Difficulty 3/5 1-2 days Newbie friendliness 78/100
sisaku-security/sisakulint#582 ·
-
untrusted-checkout: false-positive CRITICAL on workflow_call inputs.* refs (no caller-taint check) Openbug
Difficulty 3/5 1-2 days Newbie friendliness 78/100
sisaku-security/sisakulint#580 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
sisaku-security/sisakulint#577 · 6 comments ·
-
cache-poisoning: workflow_dispatch is misclassified as an 'external' attacker-triggerable event Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#571 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#568 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 72/100
sisaku-security/sisakulint#562 ·
-
area/supply-chain bug
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#560 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
sisaku-security/sisakulint#554 ·
-
bug priority/p2
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#552 ·
-
Difficulty 5/5 Over a week Newbie friendliness 45/100
sisaku-security/sisakulint#550 · 2 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 70/100
sisaku-security/sisakulint#539 ·
-
secret-in-log: false positive on echo piped into a file-redirecting command (e.g. base64 -d > file) Open
Difficulty 3/5 1-2 days Newbie friendliness 84/100
sisaku-security/sisakulint#537 ·
-
question
Difficulty 5/5 Over a week Newbie friendliness 35/100
sisaku-security/sisakulint#535 ·
-
area/supply-chain bug
Difficulty 3/5 1-2 days Newbie friendliness 68/100
sisaku-security/sisakulint#534 ·
-
area/cache bug
Difficulty 4/5 3-5 days Newbie friendliness 45/100
sisaku-security/sisakulint#533 ·
-
area/supply-chain bug
Difficulty 4/5 3-5 days Newbie friendliness 35/100
sisaku-security/sisakulint#532 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#530 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#529 ·
-
area/taint-analysis epic
Difficulty 5/5 Over a week Newbie friendliness 35/100
sisaku-security/sisakulint#502 ·
-
area/secret-in-log enhancement priority/p3
Difficulty 4/5 3-5 days Newbie friendliness 48/100
sisaku-security/sisakulint#444 ·
-
area/secret-in-log enhancement priority/p3
Difficulty 4/5 3-5 days Newbie friendliness 55/100
sisaku-security/sisakulint#443 ·