step-security / secure-repo

Orchestrate GitHub Actions Security

https://app.stepsecurity.io

step-security/secure-repo Issues

Update workflow templates to the latest versions
Updated 2 months ago1
.pre-commit-config.yaml is not valid yaml
Updated 5 months ago3
Duplicate Harden Runner
Updated 5 months ago1
I try analyze my reposiroty, but get error: `invalid Auth Token`
Closed 9 months ago2
No file change in Pull request
Updated 10 months ago1
Change suggested to add Dependabot config for a subfolder even though that exists already
Updated a year ago1
Add actionlint to the pre-commit config file
Updated a year ago
Permissions required by token option in trufflehog github command
Closed a year ago1
Add option to pin revs in the pre-commit hooks recommendation
Updated a year ago
Add pre-commit hooks to catch linting issues and prevent credential leaks
Closed a year ago5
Transform GitHub Actions Workflows to Use OIDC Instead of Long-lived Credentials
Updated a year ago1
Orchestrate a workflow for super-linter
Updated a year ago
Dashboard Access Request
Closed a year ago2
Increment actions permissions to knowledge-base
Closed a year ago2
Ensure pinned dependencies
Updated a year ago2
Update message when adding harden runner
Closed a year ago2
An issue with yaml format on dependantbot.yml generated
Closed a year ago4
issue with quotations when pinning actions
Updated a year ago1
Secure-by-default templates
Updated a year ago1
Replace tag if already exists when pinning Action
Closed a year ago4
Incorrect suggestion to add `step-security/harden-runner` to a container-based job
Closed a year ago1
Setup GitHub admin settings using GitOps/ pull request
Updated a year ago
Idea: Backstage Plugin
Updated a year ago1
Only add dependabot config for root folder for maven
Closed a year ago2
`cpp` language not being added to CodeQL workflows
Closed a year ago1
Add SECURITY.md file if missing
Updated a year ago
Add Scorecard badge to README via PR along with Scorecard workflow
Updated a year ago
Create PR to set block list for harden-runner
Updated a year ago
SecureWorkflow function crashes when provided with empty file
Updated a year ago
Transform GitHub Actions Workflows to Generate SBOM (Software Bill of Materials)
Updated a year ago
Dockerfiles that are not named `Dockerfile` are not fixed
Updated a year ago
Automatically calculate CODEOWNERS file for a project
Updated a year ago
Docker fix fails when tag not specified for image
Closed a year ago3
Docker image is pinned when already pinned
Closed a year ago3
Retain docker image tag when pinning in Actions workflows
Closed a year ago2
Remove long comments from dependency review template
Closed a year ago1
Provide options for additional SAST tools based on language
Updated a year ago
Not propose to add CodeQL when the default is already enabled
Updated a year ago3
Make the newlines after fixes configurable
Updated a year ago
Shorten comment line in the CodeQL template
Closed a year ago3
Add knowledge-base to auto-generated PRs
Closed a year ago1
Provide options for dependabot config
Updated a year ago
[KB] Add GitHub token permissions for paulhatch/semantic-version Action
Closed a year ago1
[KB] Add GitHub token permissions for imjasonh/setup-ko Action
Closed a year ago3
[KB] Add GitHub token permissions for sigstore/scaffolding/actions/setup Action
Closed a year ago1
[KB] Add GitHub token permissions for chainguard-dev/actions/kind-diag Action
Closed a year ago1
[KB] Add GitHub token permissions for dorny/test-reporter Action
Closed a year ago1
[KB] Add GitHub token permissions for shogo82148/actions-upload-release-asset Action
Closed a year ago1
[KB] Add GitHub token permissions for actions-rs/install Action
Closed a year ago1
[KB] Add GitHub token permissions for actions-rs/clippy-check Action
Closed a year ago1