registry / @intentius/chant-lexicon-github / 0.18.33

@intentius/chant-lexicon-github@0.18.33

GitHub Actions lexicon for chant — declarative IaC in TypeScript

Static Scan Results

scanned 19h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystem

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 252 file(s), 647 KB of source, external domains: example.com, json.schemastore.org, staging.example.com

Source & flagged code

6 flagged

src/lint/rules/rules.test.tsView file

Lines 321-366typescript

321 expect(diags[0].severity).toBe("warning");

322 });

323

324 test("does not flag cancelInProgress with group", () => {

325

Source & flagged code

6 flagged · loading source

src/lint/rules/rules.test.tsView file

341patternName = aws_access_key severity = critical line = 341 matchedText = const ct...;`);

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code