Skip to content

πŸ”’ [IBM OSPO Security Notification] β€” IBM/actionspzΒ #137

Open

Description

@security-ops-bot

πŸ”’ [IBM OSPO Security Notification] β€” IBM/actionspz

Action required: Remediate the alerts listed below before their SLA deadline.
This issue will be closed automatically once all alerts are resolved.

SLA policy: critical = 7 days, high = 30 days, medium = 90 days, low = no deadline.
Alerts at or above medium severity will trigger a warning comment before the deadline and
repo archiving if unresolved. Low-severity alerts are tracked here for visibility only β€”
they will never trigger warnings or archiving.

πŸ’‘ Tip: To have Dependabot automatically open fix PRs for dependency alerts, enable
Dependabot security updates in your repo settings:
Settings β†’ Advanced Security β†’ Dependabot security updates β†’ Enable.

πŸ“– New to this issue? See the Security Issue Guide for a full explanation of what this issue means and what you need to do.

Attention: @pleia2 @clnperez @mjturek @janani66

Dependabot Alerts

No open Dependabot alerts.

Code Scanning Alerts

Severity Rule Tool Deadline
🟑 medium actions/missing-workflow-permissions CodeQL 2027-01-24
🟑 medium actions/missing-workflow-permissions CodeQL 2026-12-28

Secret Scanning Alerts

No open secret scanning alerts.


Activity

  1. janani66 commented on Sep 30, 2026

    @janani66
    Member

    @rahulssv-ibm -- can you look into this?

  2. security-ops-bot commented on Oct 26, 2026

    @security-ops-bot
    Author

    πŸ”„ Code & Secret Scanning Alert Changes

    Added: cs-3 (code-scanning, medium)

    Resolved: cs-2 (code-scanning)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions