Method List
-
#<=> Finding
-
#analyze SupplyChain
-
apply AiFix
-
apply AutoFix
-
#build_fix_pr_body Top Level Namespace
-
build_prompt AiFix
-
call_claude AiFix
-
can_fix? AiFix
-
can_fix? AutoFix
-
#changed_files_for_pr Top Level Namespace
-
#check Rules::Base
-
#check Rules::CachePoisoning
-
#check Rules::CurlPipeShell
-
#check Rules::MissingTimeouts
-
#check Rules::UnpinnedActions
-
#check Rules::CredentialWindow
-
#check Rules::GitConfigGlobal
-
#check Rules::HardcodedSecrets
-
#check Rules::UnpinnedArtifact
-
#check Rules::DangerousTriggers
-
#check Rules::ShellInjectionJq
-
#check Rules::UnscopedAppToken
-
#check Rules::MissingPermissions
-
#check Rules::AllowForksArtifact
-
#check Rules::ShellInjectionExpr
-
#check Rules::ExcessivePermissions
-
#check Rules::MissingPersistCreds
-
#check Rules::OverlyBroadTriggers
-
#check Rules::UnpinnedDockerImage
-
#check Rules::BuildPublishSameJob
-
#check Rules::MissingEnvProtection
-
#check Rules::StaticAwsCredentials
-
#check Rules::GithubScriptInjection
-
#check Rules::MissingFrozenLockfile
-
#check Rules::SelfHostedRunnerFork
-
#check Rules::DockerBuildArgSecrets
-
#check Rules::WorkflowDispatchInjection
-
#cleanup CloneClient
-
#code Finding
-
#config Policy
-
#critical? Finding
-
#data Workflow
-
#description Rules::Base
-
#description Rules::CachePoisoning
-
#description Rules::CurlPipeShell
-
#description Rules::MissingTimeouts
-
#description Rules::UnpinnedActions
-
#description Rules::CredentialWindow
-
#description Rules::GitConfigGlobal
-
#description Rules::HardcodedSecrets
-
#description Rules::UnpinnedArtifact
-
#description Rules::DangerousTriggers
-
#description Rules::ShellInjectionJq
-
#description Rules::UnscopedAppToken
-
#description Rules::MissingPermissions
-
#description Rules::AllowForksArtifact
-
#description Rules::ShellInjectionExpr
-
#description Rules::ExcessivePermissions
-
#description Rules::MissingPersistCreds
-
#description Rules::OverlyBroadTriggers
-
#description Rules::UnpinnedDockerImage
-
#description Rules::BuildPublishSameJob
-
#description Rules::MissingEnvProtection
-
#description Rules::StaticAwsCredentials
-
#description Rules::GithubScriptInjection
-
#description Rules::MissingFrozenLockfile
-
#description Rules::SelfHostedRunnerFork
-
#description Rules::DockerBuildArgSecrets
-
#description Rules::WorkflowDispatchInjection
-
#env Workflow
-
#errors Policy
-
#excepted? Policy
-
extract_yaml AiFix
-
#fetch_dependabot_config CloneClient
-
#fetch_dependabot_config LocalClient
-
#fetch_dependabot_config GitHubClient
-
#fetch_file_content GitHubClient
-
#fetch_platform_configs LocalClient
-
#fetch_repos GitHubClient
-
#fetch_workflows CloneClient
-
#fetch_workflows LocalClient
-
#fetch_workflows GitHubClient
-
#file Finding
-
#file_exists? CloneClient
-
#file_exists? LocalClient
-
#file_exists? GitHubClient
-
#filename Workflow
-
#find_all_lines Platforms::SharedPatterns
-
#find_line Platforms::SharedPatterns
-
#fix Finding
-
fix_dispatch_injection AutoFix
-
fix_missing_permissions AutoFix
-
fix_missing_timeouts AutoFix
-
fix_persist_credentials AutoFix
-
fix_shell_injection AutoFix
-
fix_unpinned_action AutoFix
-
#format Formatter::Json
-
#format Formatter::Sarif
-
#format Formatter::Terminal
-
#high? Finding
-
#ignored? Policy
-
#initialize Policy
-
#initialize Scanner
-
#initialize Workflow
-
#initialize RuleEngine
-
#initialize CloneClient
-
#initialize LocalClient
-
#initialize ShaResolver
-
#initialize SupplyChain
-
#initialize GitHubClient
-
#initialize Platforms::GitLab
-
#initialize Platforms::Bitbucket
-
#jobs Workflow
-
#line Finding
-
#line_content Workflow
-
#line_content Platforms::SharedPatterns
-
#line_of Workflow
-
#lines_of Workflow
-
#loaded? Policy
-
#low? Finding
-
#medium? Finding
-
#message Finding
-
#min_severity Policy
-
#name Rules::Base
-
#name Rules::CachePoisoning
-
#name Rules::CurlPipeShell
-
#name Rules::MissingTimeouts
-
#name Rules::UnpinnedActions
-
#name Rules::CredentialWindow
-
#name Rules::GitConfigGlobal
-
#name Rules::HardcodedSecrets
-
#name Rules::UnpinnedArtifact
-
#name Rules::DangerousTriggers
-
#name Rules::ShellInjectionJq
-
#name Rules::UnscopedAppToken
-
#name Rules::MissingPermissions
-
#name Rules::AllowForksArtifact
-
#name Rules::ShellInjectionExpr
-
#name Rules::ExcessivePermissions
-
#name Rules::MissingPersistCreds
-
#name Rules::OverlyBroadTriggers
-
#name Rules::UnpinnedDockerImage
-
#name Rules::BuildPublishSameJob
-
#name Rules::MissingEnvProtection
-
#name Rules::StaticAwsCredentials
-
#name Rules::GithubScriptInjection
-
#name Rules::MissingFrozenLockfile
-
#name Rules::SelfHostedRunnerFork
-
#name Rules::DockerBuildArgSecrets
-
#name Rules::WorkflowDispatchInjection
-
#parse_error? Workflow
-
#permissions Workflow
-
#print_fix_summary Top Level Namespace
-
#raw Workflow
-
#raw_lines Workflow
-
#recommended_policies Policy
-
#required_policies Policy
-
#resolve MockShaResolver
-
#resolve ShaResolver
-
resolve TokenResolver
-
#rule Finding
-
#rule_severity Policy
-
#rules RuleEngine
-
#run_blocks Workflow
-
#scan Scanner
-
#scan RuleEngine
-
#scan Platforms::GitLab
-
#scan Platforms::Bitbucket
-
#scan_and_fix Top Level Namespace
-
#scan_for_hardcoded_secrets Platforms::SharedPatterns
-
#scan_for_missing_timeout Platforms::SharedPatterns
-
#scan_org Scanner
-
#severity Finding
-
#severity Rules::Base
-
#severity Rules::CachePoisoning
-
#severity Rules::CurlPipeShell
-
#severity Rules::MissingTimeouts
-
#severity Rules::UnpinnedActions
-
#severity Rules::CredentialWindow
-
#severity Rules::GitConfigGlobal
-
#severity Rules::HardcodedSecrets
-
#severity Rules::UnpinnedArtifact
-
#severity Rules::DangerousTriggers
-
#severity Rules::ShellInjectionJq
-
#severity Rules::UnscopedAppToken
-
#severity Rules::MissingPermissions
-
#severity Rules::AllowForksArtifact
-
#severity Rules::ShellInjectionExpr
-
#severity Rules::ExcessivePermissions
-
#severity Rules::MissingPersistCreds
-
#severity Rules::OverlyBroadTriggers
-
#severity Rules::UnpinnedDockerImage
-
#severity Rules::BuildPublishSameJob
-
#severity Rules::MissingEnvProtection
-
#severity Rules::StaticAwsCredentials
-
#severity Rules::GithubScriptInjection
-
#severity Rules::MissingFrozenLockfile
-
#severity Rules::SelfHostedRunnerFork
-
#severity Rules::DockerBuildArgSecrets
-
#severity Rules::WorkflowDispatchInjection
-
#show_diffs Top Level Namespace
-
#steps Workflow
-
#tmpdir CloneClient
-
#to_h Finding
-
#triggers Workflow
-
#uses_actions Workflow
-
#write_fixes Top Level Namespace