Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deps analysis test #23

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Deps analysis test #23

wants to merge 2 commits into from

Conversation

naveensrinivasan
Copy link
Owner

No description provided.

Repository owner deleted a comment from github-actions bot Feb 23, 2023
@github-actions
Copy link

Scorecard Results

Vulnerabilties https://github.com/RobotsAndPencils/go-saml
Severity AdvisoryGhsaId AdvisorySummary AdvisoryUrl
moderate GHSA-5rhg-xhgr-5hfj go-saml's XML Digital Signatures use SHA-1 https://github.com/advisories/GHSA-5rhg-xhgr-5hfj

github.com/aws/aws-sdk-go-v2 - 2022-11-28
https://api.securityscorecards.dev/projects/github.com/aws/aws-sdk-go-v2

CheckScore
Code-Review0
Branch-Protection6
Dangerous-Workflow10
Dependency-Update-Tool0
Binary-Artifacts9
github.com/aws/smithy-go - 2022-11-28
https://api.securityscorecards.dev/projects/github.com/aws/smithy-go

CheckScore
Code-Review7
Branch-Protection6
Dangerous-Workflow10
Binary-Artifacts9
Dependency-Update-Tool0
github.com/google/osv-scanner - 2023-02-23
https://api.securityscorecards.dev/projects/github.com/google/osv-scanner

CheckScore
Binary-Artifacts10
Branch-Protection-1
Code-Review10
Dangerous-Workflow10
Dependency-Update-Tool10
github.com/emicklei/go-restful - 2022-11-28
https://api.securityscorecards.dev/projects/github.com/emicklei/go-restful

CheckScore
Code-Review2
Dangerous-Workflow10
Binary-Artifacts10
Dependency-Update-Tool0
Branch-Protection0
VulnerabilitySeveritySummary
https://github.com/advisories/GHSA-r48q-9g5r-8q2hcriticalAuthorization Bypass Through User-Controlled Key in go-restful

@naveensrinivasan naveensrinivasan mentioned this pull request Feb 23, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@naveensrinivasan