Public reference / No account required
What a review actually checks.
This page lists the checks a review can run. It does not run a review, connect to a cloud account, or prove that a system is secure.
Showing 1–10 of 48
Public network access
Wildcard IAM permissions
Elevated container privileges
Proposes a line change
Container image scan
Public database
Proposes a line change
Docker socket
Container runs as root
Proposes a line change
Remote script piped to a shell
Pull request target checkout of PR code
Proposes a line change
Action pinned to @main
What a check cannot do
It reads the text you submit. It does not call a cloud account.
A value is resolved only when the literal is in the files you submit.
No findings does not prove the system is secure.