legitify icon indicating copy to clipboard operation
legitify copied to clipboard

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

Results 27 legitify issues
Sort by recently updated
recently updated
newest added

### TL;DR Third-party applications may expose risk when not restricted. For instance: ![image](https://user-images.githubusercontent.com/72736154/180988471-a15efc26-0226-49c8-9694-2e57aa669b8f.png) This will allow you to prevent untrusted apps from accessing the organization's resources while allowing organization members...

enhancement
policy

### TL;DR Prepare a GitHub action for easy integration of legitify as a periodic scanner to keep organizations/repositories secure. ### Detailed design ```markdown This could be implemented as: 1. Workflow...

enhancement

### TL;DR Add SARIF as an additional output format ### Detailed design _No response_ ### Additional information _No response_

enhancement

### TL;DR Support scanning GHES for misconfigurations ### Detailed design _No response_ ### Additional information _No response_

enhancement
hacktoberfest

### TL;DR Add a policy that alerts if the GitHub Actions default permission is not read-only. Applies for repository & organization ### Detailed design _No response_ ### Additional information _No...

enhancement
policy
hacktoberfest

### TL;DR I would like to be able to set a flag to skip analyzing archived repos in my GitHub organization so I don't have to comb through results of...

enhancement

#### What's being changed? Updating docs and action examples to note that one must separate multiple repos with commas. #### Is this PR related to an existing issue? no ####...

### TL;DR Using the github action- when I want to just scope the analysis to certain namespaces and I pass the namespace flag to extras- I get errors. ### Expected...

bug

### TL;DR Currently, it is not possible to use the action with the automatically generated GITHUB_TOKEN because it has no permission to execute the following API: ``` https://api.github.com/user/orgs ``` It...

enhancement

### TL;DR As the remediation steps suggest, many policies can be fixed automatically. Introduce a new command to apply these fixes. ### Detailed design ```markdown - Support for receiving the...

enhancement