vulnerability-scanning
Warn
Audited by Runlayer on Mar 6, 2026
Risk Level: MEDIUM
Scan Summary
Flagged Files (2)
vulnerability-scanning/references/cicd-integration-github-actions.mdMEDIUM
79.5%
Risky tool definition detected
- name: Upload Trivy results to GitHub Security uses: github/codeql-action/upload-sarif@v2 with: sarif_file: "trivy-results.sarif" - name: Run Snyk Security Scan uses: snyk/actions/node@master env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: args: --severity-threshold=high - name: OWASP Dependency Check uses: dependency-check/Dependency-Check_Action@main with: project: "myapp" path: "." format: "JSON" - name: Fail on high severity run: | if [ -f trivy-results.sarif ]; then HIGH_COUNT=$(jq '.runs
vulnerability-scanning/scripts/validate-config.shLOW
54.1%
Tool passed security scan
Passed Files (4)Click to expand
vulnerability-scanning/templates/config-starter.yamlOK
29.3%
Tool passed security scan
vulnerability-scanning/references/nodejs-vulnerability-scanner.mdOK
22.6%
Tool passed security scan
vulnerability-scanning/references/python-owasp-scanner.mdOK
21.6%
Tool passed security scan
vulnerability-scanning/SKILL.mdOK
13.2%
Tool passed security scan
Audit Metadata