semgrep-misconfigurations

r2c

Author

unknown

Download Count*

LGPL Commons Clause

License

Collection of rules preventing semgrep misconfigurations

Run Locally

Rules (1)

yaml.github-actions.semgrep-configuration.semgrep-github-action-push-without-branches.semgrep-github-action-push-without-branches

returntocorp

yaml

The 'branches' field (in the push event configuration) contains no branches. This causes all branches to be scanned and may result in unneccessary duplicate findings across the entire codebase.