{
  "history": [
    {
      "added": 0,
      "commit": "8a1bff313f4d183dba5aa154ecbe89ad751c9153",
      "date": "2026-11-01",
      "dependencies": 18,
      "errors": [],
      "fixable": 0,
      "go_version": null,
      "in_binary": null,
      "new_vulnerabilities": 0,
      "osv_confirmed": 0,
      "osv_only": 0,
      "ref": "v2.17.0",
      "release_changed": false,
      "release_integrity": "none",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 6.8,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "Negligible": 0,
        "Unknown": 0
      },
      "workflow": {
        "High": 36,
        "Low": 0,
        "Medium": 18,
        "files": 19
      }
    },
    {
      "added": 0,
      "commit": "8a1bff313f4d183dba5aa154ecbe89ad751c9153",
      "date": "2026-11-02",
      "dependencies": 18,
      "errors": [],
      "fixable": 0,
      "go_version": null,
      "in_binary": null,
      "kev": null,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 0,
      "osv_only": 0,
      "ref": "v2.17.0",
      "release_changed": false,
      "release_integrity": "none",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 6.8,
      "scorecard_date": "2026-10-19",
      "scorecard_note": null,
      "scorecard_source": "openssf-api",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "Negligible": 0,
        "Unknown": 0
      },
      "vulnerable_packages": 0,
      "workflow": {
        "High": 36,
        "Low": 0,
        "Medium": 18,
        "files": 19
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "API & Dynamic Testing (DAST)",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v2.17.0",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "8a1bff313f4d183dba5aa154ecbe89ad751c9153",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-zap-errors.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/pr-labeler.yml",
        "name": "actions/labeler",
        "purl": "pkg:github/actions/labeler@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ci.yml",
        "name": "actions/setup-java",
        "purl": "pkg:github/actions/setup-java@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/test-packaged-scans.yml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/cla.yml",
        "name": "contributor-assistant/github-action",
        "purl": "pkg:github/contributor-assistant/github-action@v2.6.1",
        "version": "v2.6.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-live-docker.yml",
        "name": "crashappsec/setup-chalk-action",
        "purl": "pkg:github/crashappsec/setup-chalk-action@main",
        "version": "main"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lock.yml",
        "name": "dessant/lock-threads",
        "purl": "pkg:github/dessant/lock-threads@v5.0.1",
        "version": "v5.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-live-docker.yml",
        "name": "docker/build-push-action",
        "purl": "pkg:github/docker/build-push-action@v6.18.0",
        "version": "v6.18.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-live-docker.yml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v3.6.0",
        "version": "v3.6.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-live-docker.yml",
        "name": "docker/setup-buildx-action",
        "purl": "pkg:github/docker/setup-buildx-action@v3.11.1",
        "version": "v3.11.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-live-docker.yml",
        "name": "docker/setup-qemu-action",
        "purl": "pkg:github/docker/setup-qemu-action@v3.7.0",
        "version": "v3.7.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql.yml",
        "name": "github/codeql-action/analyze",
        "purl": "pkg:github/github/codeql-action@v4#analyze",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql.yml",
        "name": "github/codeql-action/autobuild",
        "purl": "pkg:github/github/codeql-action@v4#autobuild",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql.yml",
        "name": "github/codeql-action/init",
        "purl": "pkg:github/github/codeql-action@v4#init",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ci.yml",
        "name": "gradle/actions/setup-gradle",
        "purl": "pkg:github/gradle/actions@v5.0.0#setup-gradle",
        "version": "v5.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-zap-errors.yml",
        "name": "myConsciousness/bluesky-post",
        "purl": "pkg:github/myConsciousness/bluesky-post@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-snap.yml",
        "name": "snapcore/action-build",
        "purl": "pkg:github/snapcore/action-build@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-snap.yml",
        "name": "snapcore/action-publish",
        "purl": "pkg:github/snapcore/action-publish@v1.2.0",
        "version": "v1.2.0"
      }
    ],
    "description": "Scan web applications dynamically with OWASP ZAP",
    "errors": [],
    "id": "zaproxy__zaproxy",
    "manifests": [
      ".github/workflows/check-zap-errors.yml",
      ".github/workflows/ci.yml",
      ".github/workflows/cla.yml",
      ".github/workflows/codeql.yml",
      ".github/workflows/crowdin-upload-files.yml",
      ".github/workflows/handle-release.yml",
      ".github/workflows/lock.yml",
      ".github/workflows/pr-labeler.yml",
      ".github/workflows/prepare-release-main-version.yml",
      ".github/workflows/release-live-docker.yml",
      ".github/workflows/release-main-docker.yml",
      ".github/workflows/release-main-version.yml",
      ".github/workflows/release-snap.yml",
      ".github/workflows/release-weekly-docker.yml",
      ".github/workflows/release-weekly.yml",
      ".github/workflows/run-integration-tests.yml",
      ".github/workflows/sonar.yml",
      ".github/workflows/test-chrome-docker.yml",
      ".github/workflows/test-packaged-scans.yml",
      "build.gradle.kts",
      "buildSrc/build.gradle.kts",
      "docker/requirements.txt"
    ],
    "name": "zap",
    "osv": {
      "advisories": 0,
      "available": true,
      "confirmed": 0,
      "osv_only": [],
      "warning": null
    },
    "ref": "v2.17.0",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "ZAP_2.17.0_Linux.tar.gz",
      "assets": 9,
      "build_provenance": null,
      "checksums_published": false,
      "digest_matches_github": true,
      "immutable_release": null,
      "methods": [],
      "provenance_published": false,
      "sbom_published": false,
      "signature": null,
      "signatures_published": false,
      "signer": null,
      "verdict": "none"
    },
    "released_at": "2025-12-15T14:41:51Z",
    "repository": "zaproxy/zaproxy",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 76 shared packages \u2014 no actual upgrades",
        "Core system packages stable: github (57), file (19) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:08:07+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "Fuzzing",
          "reason": "project is not fuzzed",
          "score": 0
        },
        {
          "name": "Signed-Releases",
          "reason": "Project has not signed or included provenance with any releases.",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 4",
          "score": 4
        },
        {
          "name": "CII-Best-Practices",
          "reason": "badge detected: Passing",
          "score": 5
        },
        {
          "name": "Binary-Artifacts",
          "reason": "binaries present in source code",
          "score": 9
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        },
        {
          "name": "SAST",
          "reason": "SAST tool is run on all commits",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Branch-Protection",
          "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
          "score": -1
        }
      ],
      "date": "2026-10-19",
      "score": 6.8,
      "source": "openssf-api",
      "version": "v5.6.0"
    },
    "vulnerabilities": [],
    "workflow_audit": {
      "files": 19,
      "findings": [
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/check-zap-errors.yml",
          "line": 12,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ci.yml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ci.yml",
          "line": 23,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/cla.yml",
          "line": 2,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql.yml",
          "line": 26,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql.yml",
          "line": 27,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql.yml",
          "line": 31,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql.yml",
          "line": 34,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql.yml",
          "line": 35,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/crowdin-upload-files.yml",
          "line": 11,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/crowdin-upload-files.yml",
          "line": 12,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/handle-release.yml",
          "line": 11,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/handle-release.yml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/pr-labeler.yml",
          "line": 14,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/prepare-release-main-version.yml",
          "line": 11,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/prepare-release-main-version.yml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-live-docker.yml",
          "line": 13,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-live-docker.yml",
          "line": 14,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-main-docker.yml",
          "line": 13,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-main-docker.yml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-main-version.yml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-main-version.yml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-main-version.yml",
          "line": 38,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-main-version.yml",
          "line": 42,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-snap.yml",
          "line": 13,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-weekly-docker.yml",
          "line": 12,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-weekly-docker.yml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-weekly.yml",
          "line": 11,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-weekly.yml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release-weekly.yml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/run-integration-tests.yml",
          "line": 13,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/sonar.yml",
          "line": 12,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/sonar.yml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/test-chrome-docker.yml",
          "line": 13,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/test-packaged-scans.yml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/test-packaged-scans.yml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-zap-errors.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/ci.yml",
          "line": 14,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "action or reusable workflow from archived repository",
          "file": ".github/workflows/cla.yml",
          "line": 21,
          "note": "this step",
          "rule": "archived-uses",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#archived-uses"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/crowdin-upload-files.yml",
          "line": 7,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/handle-release.yml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/prepare-release-main-version.yml",
          "line": 7,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-live-docker.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-main-docker.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-main-version.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-main-version.yml",
          "line": 12,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-main-version.yml",
          "line": 33,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-snap.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-weekly-docker.yml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-weekly.yml",
          "line": 7,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-integration-tests.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/sonar.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test-chrome-docker.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test-packaged-scans.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}