Org-wide GHAS critical-severity alert sweep (2026-07-31). This repo has open critical alerts not yet triaged.
Code scanning (critical, open)
| # |
Finding |
| #2 |
Command built from user-controlled sources |
Part of the GHAS trial full-fleet audit (30-day trial, org-wide rollout complete 103/103 repos). See wave-av org secret-scanning sweep for the sibling effort on leaked credentials.
Org-wide GHAS critical-severity alert sweep (2026-07-31). This repo has open critical alerts not yet triaged.
Code scanning (critical, open)
Part of the GHAS trial full-fleet audit (30-day trial, org-wide rollout complete 103/103 repos). See wave-av org secret-scanning sweep for the sibling effort on leaked credentials.