Skip to content

Actions: HailBytes/mcp-security-scanner

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
84 workflow runs
84 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(TOOL_DESC_INJECTION): detect tool-poisoning payloads and scan tool names CI #65: Pull request #45 opened by dmchaledev
22s claude/amazing-franklin-accgc4
claude/amazing-franklin-accgc4
22s
fix(EXPOSED_SECRETS): redact detected secrets in finding evidence CI #64: Pull request #44 opened by dmchaledev
24s claude/amazing-franklin-97aue0
claude/amazing-franklin-97aue0
24s
feat(auth): flag placeholder & default credentials (PLACEHOLDER_CREDENTIAL) CI #63: Pull request #43 opened by dmchaledev
23s claude/amazing-franklin-sjdz5d
claude/amazing-franklin-sjdz5d
23s
feat(CREDENTIALS_IN_URL): flag credentials embedded in the transport URL CI #62: Pull request #42 opened by dmchaledev
23s claude/amazing-franklin-gx0i1r
claude/amazing-franklin-gx0i1r
23s
fix(INSECURE_TRANSPORT): detect ws:// declared via top-level serverUrl CI #61: Pull request #41 opened by dmchaledev
22s claude/amazing-franklin-ryrtel
claude/amazing-franklin-ryrtel
22s
feat(HIDDEN_TOOL_METADATA): detect tool-poisoning via invisible Unicode in tool metadata CI #60: Pull request #40 opened by dmchaledev
25s claude/amazing-franklin-rw53e5
claude/amazing-franklin-rw53e5
25s
feat(EXPOSED_SECRETS): expand secret coverage and stop leaking matched secrets in evidence CI #59: Pull request #38 opened by dmchaledev
22s claude/amazing-franklin-c1znpv
claude/amazing-franklin-c1znpv
22s
feat(EXPOSED_SECRETS): detect common real-world credential formats CI #58: Pull request #37 opened by dmchaledev
27s claude/amazing-franklin-jall53
claude/amazing-franklin-jall53
27s
fix: --exit-code no longer fails a passing scan on the INFO URL_SCAN_LIMITED note CI #57: Pull request #36 opened by dmchaledev
28s claude/amazing-franklin-6svzd1
claude/amazing-franklin-6svzd1
28s
feat(EXPOSED_SECRETS): broaden secret detection and stop leaking matched values CI #56: Pull request #35 opened by dmchaledev
23s claude/amazing-franklin-lwenzn
claude/amazing-franklin-lwenzn
23s
fix(cli): --exit-code no longer fails on the URL_SCAN_LIMITED INFO note CI #55: Pull request #34 opened by dmchaledev
26s claude/amazing-franklin-lotlc3
claude/amazing-franklin-lotlc3
26s
feat(sarif): emit GitHub security-severity so Code Scanning ranks findings by severity CI #54: Pull request #33 opened by dmchaledev
23s claude/amazing-franklin-tdbnul
claude/amazing-franklin-tdbnul
23s
fix(permissions): flag wildcard and case-variant dangerous tool grants CI #53: Pull request #32 opened by dmchaledev
30s claude/amazing-franklin-jo7xav
claude/amazing-franklin-jo7xav
30s
fix(UNSAFE_TOOL_OUTPUT_PATH): resolve path traversal before matching system dirs CI #52: Pull request #31 opened by dmchaledev
26s claude/amazing-franklin-or35ez
claude/amazing-franklin-or35ez
26s
fix: resolve open issues #11, #19, #26, #27 (#30) CI #51: Commit 4ef0b12 pushed by dmchaledev
22s main
main
22s
fix: resolve open issues #11, #19, #26, #27 (#30) CI + Auto Tag #18: Commit 4ef0b12 pushed by dmchaledev
22s main
main
22s
fix: resolve open issues #11, #19, #26, #27 CI #50: Pull request #30 opened by dmchaledev
31s claude/open-issues-resolution-6zh3iw
claude/open-issues-resolution-6zh3iw
31s
fix(EXPOSED_SECRETS): detect modern API key formats (OpenAI sk-proj/svcacct, Anthropic, GitHub, Google, Slack, Stripe) CI #49: Pull request #29 opened by dmchaledev
27s claude/amazing-franklin-36hvg5
claude/amazing-franklin-36hvg5
27s
fix(EXPOSED_SECRETS): redact matched secrets in finding evidence CI #48: Pull request #28 opened by dmchaledev
22s claude/amazing-franklin-o9ldg8
claude/amazing-franklin-o9ldg8
22s
fix(cli): reject unknown --rule values instead of silently passing CI #47: Pull request #25 opened by dmchaledev
24s claude/amazing-franklin-wk0p5w
claude/amazing-franklin-wk0p5w
24s
fix(NO_AUTH): treat auth.type "none"/"disabled" as unauthenticated (#24) CI + Auto Tag #17: Commit dba94a2 pushed by dmchaledev
23s main
main
23s
fix(NO_AUTH): treat auth.type "none"/"disabled" as unauthenticated (#24) CI #46: Commit dba94a2 pushed by dmchaledev
30s main
main
30s
fix(NO_AUTH): treat auth.type "none"/"disabled" as unauthenticated CI #45: Pull request #24 opened by dmchaledev
31s claude/amazing-franklin-pfjlij
claude/amazing-franklin-pfjlij
31s
docs: fix broken --output flag and inverted score comment (#21) CI + Auto Tag #16: Commit 3a01019 pushed by dmchaledev
26s main
main
26s
docs: fix broken --output flag and inverted score comment (#21) CI #44: Commit 3a01019 pushed by dmchaledev
27s main
main
27s