Ecosyste.ms: Summary

An open API service providing a high level summary for open source projects.

https://github.com/ericcornelissen/ades

gha scanner security

Score: -Infinity

Last synced: about 9 hours ago
JSON representation

Repository metadata:

Find dangerous uses of GitHub Actions Workflow expressions.


Owner metadata:


GitHub Events

Total
Last Year

Committers metadata

Last synced: 1 day ago

Total Commits: 199
Total Committers: 2
Avg Commits per committer: 99.5
Development Distribution Score (DDS): 0.312

Commits in past year: 199
Committers in past year: 2
Avg Commits per committer in past year: 99.5
Development Distribution Score (DDS) in past year: 0.312

Name Email Commits
Eric Cornelissen e****n@g****m 137
dependabot[bot] 4****] 62

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 28
Total pull requests: 209
Average time to close issues: about 1 month
Average time to close pull requests: 2 days
Total issue authors: 1
Total pull request authors: 2
Average comments per issue: 0.14
Average comments per pull request: 0.17
Merged pull request: 174
Bot issues: 0
Bot pull requests: 94

Past year issues: 28
Past year pull requests: 209
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 2 days
Past year issue authors: 1
Past year pull request authors: 2
Past year average comments per issue: 0.14
Past year average comments per pull request: 0.17
Past year merged pull request: 174
Past year bot issues: 0
Past year bot pull requests: 94

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/ericcornelissen/ades

Top Issue Authors

  • ericcornelissen (28)

Top Pull Request Authors

  • ericcornelissen (115)
  • dependabot[bot] (94)

Top Issue Labels

  • enhancement (15)
  • meta (6)
  • bug (4)
  • help wanted (2)
  • test (1)
  • ci/cd (1)
  • pending (1)
  • security (1)

Top Pull Request Labels

  • dependencies (116)
  • ci/cd (62)
  • meta (26)
  • enhancement (24)
  • refactor (20)
  • test (13)
  • documentation (9)
  • bug (6)
  • website (4)
  • security (2)

Package metadata

proxy.golang.org: github.com/ericcornelissen/ades

The ades command can be used to Scan for Dangerous Expression in Actions (sdea -> ades) workflows and manifests - Actions being GitHub's continuous integrations platform. It is primarily intended to be used as a CLI application, but also exports its functionality for programmatic use. For programmatic use, note that this project does not use semantic versioning.

  • Homepage: https://github.com/ericcornelissen/ades
  • Documentation: https://pkg.go.dev/github.com/ericcornelissen/ades#section-documentation
  • Licenses: GPL-3.0
  • Latest release: v0.0.0-20231124091636-aea16c1576cb (published 5 months ago)
  • Last Synced: 2024-05-01T13:02:33.865Z (2 days ago)
  • Versions: 13
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent packages count: 8.8%
    • Dependent repos count: 10.691%
    • Average: 15.894%
    • Forks count: 18.801%
    • Stargazers count: 25.282%

Dependencies

.github/workflows/audit.yml actions
  • actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
  • actions/setup-go 93397bea11091df50f3d7e59dc26a7711a8bcfbe composite
.github/workflows/check.yml actions
  • actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
  • actions/setup-go 93397bea11091df50f3d7e59dc26a7711a8bcfbe composite
.github/workflows/codeql.yml actions
  • actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
  • actions/setup-go 93397bea11091df50f3d7e59dc26a7711a8bcfbe composite
  • github/codeql-action/analyze a09933a12a80f87b87005513f0abb1494c27a716 composite
  • github/codeql-action/init a09933a12a80f87b87005513f0abb1494c27a716 composite
.github/workflows/semgrep.yml actions
  • actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
  • github/codeql-action/upload-sarif a09933a12a80f87b87005513f0abb1494c27a716 composite
go.mod go
  • gopkg.in/yaml.v3 v3.0.1
go.sum go
  • gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
  • gopkg.in/yaml.v3 v3.0.1