Skip to content

Add a pure release scoring engine (release scoring, part 1) - #1166

Open
Doezer wants to merge 30 commits into
mainfrom
claude/release-scoring
Open

Doezer wants to merge 30 commits into
mainfrom
claude/release-scoring

Catch payload-named PowerShell, shell and COM files anywhere in the name

9998f5a
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded Oct 10, 2026 in 6m 53s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
dependency-review.yml 38092358571 - - Harden-Runner not enabled
deprecated-deps.yml 38092358563 - - Harden-Runner not enabled
sast.yml 38092358553 - - Harden-Runner not enabled
ci.yml 38092358546 13 7 View Insights
codeql.yml 38092358565 - - Harden-Runner not enabled
e2e.yml 38092358548 0 4 View Insights

📚 Learn More

You can learn more about this GitHub check here