You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[ERROR][BranchProtectionID] [HELP LINK] score is 0: branch protection not enabled on development\/release branches: Warn: branch protection not enabled for branch 'main' Click Remediation section below to solve this issue
[ERROR][DependencyUpdateToolID] [HELP LINK] score is 0: no update tool detected: Warn: Config file not detected in source location for dependabot, renovatebot, Sonatype Lift, or PyUp \(Python\). We recommend setting this configuration in code so it can be easily verified by others. Click Remediation section below to solve this issue
[ERROR][PinnedDependenciesID] [HELP LINK] score is 9: GitHub-owned GitHubAction not pinned by hash Remediation tip: update your workflow using \[https:\/\/app.stepsecurity.io\]\(https:\/\/app.stepsecurity.io\/secureworkflow\/codeql-agent-project\/codeql-agent-cli\/npm-publish.yml\/main?enable=pin\) Click Remediation section below for further remediation help
[ERROR][TokenPermissionsID] [HELP LINK] score is 0: no topLevel permission defined Remediation tip: Visit \[https:\/\/app.stepsecurity.io\/secureworkflow\]\(https:\/\/app.stepsecurity.io\/secureworkflow\/codeql-agent-project\/codeql-agent-cli\/npm-publish.yml\/main?enable=permissions\). Tick the 'Restrict permissions for GITHUB\_TOKEN' Untick other options NOTE: If you want to resolve multiple issues at once, you can visit \[https:\/\/app.stepsecurity.io\/securerepo\]\(https:\/\/app.stepsecurity.io\/securerepo\) instead. Click Remediation section below for further remediation help
[ERROR][CITestsID] [HELP LINK] score is 6: 3 out of 5 merged PRs checked by a CI test -- score normalized to 6 Click Remediation section below to solve this issue
[ERROR][SASTID] [HELP LINK] score is 0: SAST tool is not run on all commits -- score normalized to 0: Warn: 0 commits out of 17 are checked with a SAST tool Warn: CodeQL tool not detected Click Remediation section below to solve this issue
Report
Results
score is 0: branch protection not enabled on development\/release branches: Warn: branch protection not enabled for branch 'main' Click Remediation section below to solve this issueSuppressed Results
Nothing here.
Rules information
Rules details
Tool information
Report
Results
score is 0: no update tool detected: Warn: Config file not detected in source location for dependabot, renovatebot, Sonatype Lift, or PyUp \(Python\). We recommend setting this configuration in code so it can be easily verified by others. Click Remediation section below to solve this issuescore is 9: GitHub-owned GitHubAction not pinned by hash Remediation tip: update your workflow using \[https:\/\/app.stepsecurity.io\]\(https:\/\/app.stepsecurity.io\/secureworkflow\/codeql-agent-project\/codeql-agent-cli\/npm-publish.yml\/main?enable=pin\) Click Remediation section below for further remediation helpscore is 0: no topLevel permission defined Remediation tip: Visit \[https:\/\/app.stepsecurity.io\/secureworkflow\]\(https:\/\/app.stepsecurity.io\/secureworkflow\/codeql-agent-project\/codeql-agent-cli\/npm-publish.yml\/main?enable=permissions\). Tick the 'Restrict permissions for GITHUB\_TOKEN' Untick other options NOTE: If you want to resolve multiple issues at once, you can visit \[https:\/\/app.stepsecurity.io\/securerepo\]\(https:\/\/app.stepsecurity.io\/securerepo\) instead. Click Remediation section below for further remediation helpSuppressed Results
Nothing here.
Rules information
Rules details
,
,
,
,
,
Tool information
Report
Results
score is 6: 3 out of 5 merged PRs checked by a CI test -- score normalized to 6 Click Remediation section below to solve this issuescore is 0: no badge detected Click Remediation section below to solve this issuescore is 0: found 18 unreviewed human changesets Click Remediation section below to solve this issuescore is 0: project is not fuzzed Click Remediation section below to solve this issuescore is 0: SAST tool is not run on all commits -- score normalized to 0: Warn: 0 commits out of 17 are checked with a SAST tool Warn: CodeQL tool not detected Click Remediation section below to solve this issuescore is 0: security policy file not detected Click Remediation section below to solve this issueSuppressed Results
Nothing here.
Rules information
Rules details
,
,
,
,
,
,
,
,
,
,
Tool information
The text was updated successfully, but these errors were encountered: