ActionScope good first issues (Python)

enhancement help wanted v0.7.0

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add a GitHub Environments hardening guide about 1 month ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

test: Detect missing scan flags in the CLI reference about 1 month ago

documentation help wanted good first issue ci

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add CloudFormation and SAM IAM evidence guide about 1 month ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

test: Validate action.yml input and output metadata about 1 month ago

help wanted good first issue marketplace ci

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add a complete GitHub Action inputs and outputs reference about 1 month ago

documentation help wanted good first issue marketplace

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add contributor guide for compromised action database entries about 1 month ago

documentation help wanted good first issue security compromised-action

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add artifact poisoning detector guide about 1 month ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Explain --max-policy-files directory exemptions about 1 month ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add AI agent detector tests for Gemini, OpenCode, and Continue 5 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add output formats reference page 5 months ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add script injection tests for issue_comment and discussion events 5 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add AI agent prompt injection detector guide 5 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add Docker action pinning edge-case tests 5 months ago

enhancement help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Record demo GIF and add it to the README 5 months ago

documentation help wanted

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add docs dependency extra and MkDocs build instructions 5 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add artifact poisoning test for dawidd6/action-download-artifact 5 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add delta reporting guide for --save-state and --load-state 5 months ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add script injection detector guide 5 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add step-by-step tutorial for scanning your first repo 5 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Improve error messages when policy file not found 5 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add iam:CreateLoginProfile to ALWAYS_CRITICAL set 5 months ago

enhancement good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

Expand AWS privilege escalation detector coverage 5 months ago

good first issue new-check security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

r12habh/ActionScope

Open Issues Need Help