Public reference / No account required
What a review actually checks.
This page lists the checks a review can run. It does not run a review, connect to a cloud account, or prove that a system is secure.
Showing 21–30 of 48
Private key material in source
Pipeline prints a secret
Unpinned pipeline image
Secret assigned in a Terraform variable
Public input on a Terraform module
Secret assigned in a Terraform local
Secret assigned in serverless environment
IAM policy allows every action
Referenced value is public
Referenced secret
What a check cannot do
It reads the text you submit. It does not call a cloud account.
A value is resolved only when the literal is in the files you submit.
No findings does not prove the system is secure.