step-security/secure-repo

Issues

• Harden GitHub Actions Workflow - automatePR.yml

  #2495 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - automatePR.yml

  #2487 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - test.yml

  #2493 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - scorecards.yml

  #2492 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - release.yml

  #2491 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - kbanalysis.yml

  #2494 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - int.yml

  #2490 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - codeql.yml

  #2489 opened 2 months ago by stepsecurity-int
  0

• Harden GitHub Actions Workflow - code-review.yml

  #2488 opened 2 months ago by stepsecurity-int
  0

• fails to create PR, but shows no error message

  #2486 opened 2 months ago by BenWibking
  0

• Bug: PR creation fails without message

  #2445 opened 7 months ago by jasonkarns
  7

• Update permissions for scorecard workflow template

  #2483 opened 3 months ago by varunsh-coder
  1

• Do not set permissions for jobs with GITHUB_TOKEN in job level env variable

  #2479 opened 4 months ago by varunsh-coder
  1

• Don't add harden-runner to jobs running on Windows

  #2471 opened 5 months ago by tippmar-nr
  1

• Please add `gradle/actions/setup-gradle` and `gradle/actions/wrapper-validation` to the knowledge base

  #2468 opened 5 months ago by sschuberth
  0

• Update workflow templates to the latest versions

  #2120 opened 2 years ago by ashishkurmi
  2

• Duplicate Harden Runner

  #2401 opened a year ago by konstruktoid
  2

• .pre-commit-config.yaml is not valid yaml

  #2402 opened a year ago by konstruktoid
  3

• I try analyze my reposiroty, but get error: `invalid Auth Token`

  #2342 opened a year ago by batazor
  2

• No file change in Pull request

  #2262 opened a year ago by varunsh-coder
  1

• Change suggested to add Dependabot config for a subfolder even though that exists already

  #2250 opened a year ago by afranken
  1

• Add actionlint to the pre-commit config file

  #2232 opened a year ago by varunsh-coder
  0

• Permissions required by token option in trufflehog github command

  #2226 opened a year ago by MukulG27
  1

• Add option to pin revs in the pre-commit hooks recommendation

  #2211 opened a year ago by varunsh-coder
  0

• Add pre-commit hooks to catch linting issues and prevent credential leaks

  #2069 opened a year ago by varunsh-coder
  5

• Transform GitHub Actions Workflows to Use OIDC Instead of Long-lived Credentials

  #2032 opened 2 years ago by varunsh-coder
  1

• Orchestrate a workflow for super-linter

  #2162 opened 2 years ago by varunsh-coder
  0

• Dashboard Access Request

  #2094 opened 2 years ago by UlisesGascon
  2

• Increment actions permissions to knowledge-base

  #2011 opened 2 years ago by gabibguti
  2

• Ensure pinned dependencies

  #2150 opened 2 years ago by sozercan
  2

• Update message when adding harden runner

  #2056 opened 2 years ago by varunsh-coder
  2

• An issue with yaml format on dependantbot.yml generated

  #2139 opened 2 years ago by fperezel
  4

• issue with quotations when pinning actions

  #2109 opened 2 years ago by sozercan
  1

• Secure-by-default templates

  #2074 opened 2 years ago by varunsh-coder
  1

• Replace tag if already exists when pinning Action

  #2064 opened 2 years ago by varunsh-coder
  4

• Incorrect suggestion to add `step-security/harden-runner` to a container-based job

  #2073 opened 2 years ago by ericcornelissen
  1

• Setup GitHub admin settings using GitOps/ pull request

  #2076 opened 2 years ago by varunsh-coder
  0

• Idea: Backstage Plugin

  #2085 opened 2 years ago by regicsolutions
  1

• `cpp` language not being added to CodeQL workflows

  #2016 opened 2 years ago by varunsh-coder
  1

• Add SECURITY.md file if missing

  #2072 opened 2 years ago by varunsh-coder
  0

• Add Scorecard badge to README via PR along with Scorecard workflow

  #2071 opened 2 years ago by varunsh-coder
  0

• Create PR to set block list for harden-runner

  #2062 opened 2 years ago by varunsh-coder
  0

• SecureWorkflow function crashes when provided with empty file

  #2043 opened 2 years ago by Devils-Knight
  0

• Transform GitHub Actions Workflows to Generate SBOM (Software Bill of Materials)

  #2033 opened 2 years ago by varunsh-coder
  0

• Dockerfiles that are not named `Dockerfile` are not fixed

  #1955 opened 2 years ago by varunsh-coder
  0

• Automatically calculate CODEOWNERS file for a project

  #2031 opened 2 years ago by varunsh-coder
  0

• Docker fix fails when tag not specified for image

  #1932 opened 2 years ago by varunsh-coder
  3

• Docker image is pinned when already pinned

  #1954 opened 2 years ago by varunsh-coder
  3

• Retain docker image tag when pinning in Actions workflows

  #1999 opened 2 years ago by varunsh-coder
  2

• Remove long comments from dependency review template

  #2005 opened 2 years ago by varunsh-coder
  1