Reason

all last 30 commits are reviewed through GitHub

Reason

30 commit(s) out of 30 and 26 issue activity out of 30 found in the last 90 days -- score normalized to 10

Reason

no vulnerabilities detected

Reason

no dangerous workflow patterns detected

Reason

update tool detected

Details

• Info: Dependabot detected: .github/dependabot.yml:1

Reason

license file detected

Details

• Info: : LICENSE:1

Reason

all dependencies are pinned

Details

• Warn: npmCommand not pinned by hash: .github/workflows/tests-e2e.yml:143
• Warn: npmCommand not pinned by hash: .github/workflows/tests-e2e.yml:173
• Info: GitHub-owned GitHubActions are pinned
• Info: Third-party GitHubActions are pinned
• Info: Dockerfile dependencies are pinned
• Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
• Info: no insecure (not pinned by hash) dependency downloads found in shell scripts

Reason

no binaries found in the repo

Reason

security policy file detected

Details

• Info: security policy detected in org repo: github.com/facebook/.github/SECURITY.md:1

Reason

branch protection is not maximal on development and all release branches

Details

• Info: 'force pushes' disabled on branch 'main'
• Info: 'allow deletion' disabled on branch 'main'
• Info: status check found to merge onto on branch 'main'
• Warn: number of required reviewers is only 0 on branch 'main'

Reason

no badge detected

Reason

non read-only tokens detected in GitHub workflows

Details

• Info: topLevel 'contents' permission set to 'read': .github/workflows/build-blog-only.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/build-blog-only.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/build-perf.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/build-perf.yml/master?enable=permissions
• Warn: jobLevel 'checks' permission set to 'write': .github/workflows/build-perf.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/build-perf.yml/master?enable=permissions
• Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-perf.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/build-perf.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/canary-release.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/canary-release.yml/master?enable=permissions
• Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/codeql-analysis.yml/master?enable=permissions
• Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/codeql-analysis.yml/master?enable=permissions
• Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/codeql-analysis.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/dependency-review.yml/master?enable=permissions
• Warn: no topLevel permission defined: .github/workflows/lighthouse-report.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/lighthouse-report.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/lint.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/lint.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/showcase-test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/showcase-test.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/tests-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/tests-e2e.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/tests-swizzle.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/tests-swizzle.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/tests-windows.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/tests-windows.yml/master?enable=permissions
• Info: topLevel 'contents' permission set to 'read': .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/os33/wireguard-go/tests.yml/master?enable=permissions

Reason

project is not fuzzed