Public reference / No account required
What a review actually checks.
This page lists the checks a review can run. It does not run a review, connect to a cloud account, or prove that a system is secure.
Showing 11–20 of 48
Secret file copied into an image
Workflow prints a secret
Workflow permissions are broad
Proposes a line change
Secret assigned in an image variable
Secret assigned in workflow env
Helm privileged container
Proposes a line change
Ansible task runs as root
Storage encryption disabled
Proposes a line change
Database backups disabled
Possible AWS access key
What a check cannot do
It reads the text you submit. It does not call a cloud account.
A value is resolved only when the literal is in the files you submit.
No findings does not prove the system is secure.