Search results

[FEAT] per-file allowlist for workflowMustNotUseDangerousTriggers

enhancementNew feature or requestNew feature or request

Status: Open.

#204 In getplumber/plumber;

· goabonga opened on May 26, 2026

[FEAT] Detect GitHub dangerous inline scripts | <any shell>

enhancementNew feature or requestNew feature or request

Status: Open.

#201 In getplumber/plumber;

· thomasboni opened on May 25, 2026

[DOCS] Simplify README

documentationImprovements or additions to documentationImprovements or additions to documentation

enhancementNew feature or requestNew feature or request

Status: Open.

#200 In getplumber/plumber;

· thomasboni opened on May 25, 2026

LOTP: recognise bare git clone and third-party checkout actions

Status: Open.

#199 In getplumber/plumber;

· stephrobert opened on May 23, 2026

LOTP: match multi-word commands (go generate)

Status: Open.

#198 In getplumber/plumber;

· stephrobert opened on May 23, 2026

LOTP: detect env-var poisoning vector (BASH_ENV, TAR_OPTIONS, npm_config_*)

Status: Open.

#197 In getplumber/plumber;

· stephrobert opened on May 23, 2026

[FEAT] Detect RCE-by-design dev tools running on untrusted code (LOTP catalog)

Status: Open.

#189 In getplumber/plumber;

· stephrobert opened on May 22, 2026

feat(controls): extend cache-poisoning (ISSUE-705) to GitLab

Status: Open.

#188 In getplumber/plumber;

· stephrobert opened on May 22, 2026

feat(controls): ship artipacked (ISSUE-307)

Status: Open.

#187 In getplumber/plumber;

· stephrobert opened on May 22, 2026

feat(controls): ship overprovisioned-secrets (ISSUE-301)

Status: Open.

#186 In getplumber/plumber;

· stephrobert opened on May 22, 2026

feat(controls): ship github-env-injection (ISSUE-209)

Status: Open.

#185 In getplumber/plumber;

· stephrobert opened on May 22, 2026

feat(controls): ship ref-confusion (ISSUE-710)

Status: Open.

#184 In getplumber/plumber;

· stephrobert opened on May 22, 2026