Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Randomname653
/
Curatarr
Public
Notifications
You must be signed in to change notification settings
Fork
0
Star
1
Code
Issues
0
Pull requests
1
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Actions: Randomname653/Curatarr
Actions
All workflows
Workflows
Bandit
Bandit
CodeQL
CodeQL
Dependabot Updates
Dependabot Updates
Dependency Graph
Dependency Graph
LLM Security Scan
LLM Security Scan
OSV-Scanner
OSV-Scanner
Scorecard supply-chain security
Scorecard supply-chain security
tests
tests
Show more workflows...
Management
Caches
Bandit
Bandit
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
bandit.yml
will be ignored since log searching is not yet available
29 workflow runs
29 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Bandit
Bandit
#29:
Scheduled
26s
main
main
26s
View workflow file
Dependencies keep up with the pins: launchers install, the server rep…
Bandit
#28:
Commit
1edd176
pushed by
Randomname653
21s
main
main
21s
View workflow file
LLM sweep: scope, a memory, and a severity floor
Bandit
#27:
Commit
1dc1205
pushed by
Randomname653
23s
main
main
23s
View workflow file
Changelog: the three Dependabot bumps
Bandit
#26:
Commit
c684a21
pushed by
Randomname653
23s
main
main
23s
View workflow file
Bandit #52: the nosec marker was prompt text
Bandit
#25:
Commit
f803dd3
pushed by
Randomname653
27s
main
main
27s
View workflow file
Bump actions/github-script from 7.1.0 to 9.0.0
Bandit
#24:
Pull request
#73
opened by
dependabot
Bot
25s
dependabot/github_actions/actions/github-script-9.0.0
dependabot/github_actions/actions/github-script-9.0.0
25s
View #73
View workflow file
Bump pydantic from 2.13.4 to 2.13.5 in the minor-and-patch group
Bandit
#23:
Pull request
#72
opened by
dependabot
Bot
27s
dependabot/pip/minor-and-patch-d9f65184a5
dependabot/pip/minor-and-patch-d9f65184a5
27s
View #72
View workflow file
Bump actions/upload-artifact from 4.6.2 to 7.0.1
Bandit
#22:
Pull request
#71
opened by
dependabot
Bot
33s
dependabot/github_actions/actions/upload-artifact-7.0.1
dependabot/github_actions/actions/upload-artifact-7.0.1
33s
View #71
View workflow file
CodeQL #53: the .env writer is owner-only from the first byte
Bandit
#21:
Commit
184abea
pushed by
Randomname653
25s
main
main
25s
View workflow file
Docs: where things live after the UI grammar
Bandit
#20:
Commit
bca8042
pushed by
Randomname653
23s
main
main
23s
View workflow file
Enrichment healing, docs: the curator knows the KB states, ARCHITECTU…
Bandit
#19:
Commit
448e62f
pushed by
Randomname653
23s
main
main
23s
View workflow file
Setup coverage, frontend half: pitcher in the wizard, Settings -> Int…
Bandit
#18:
Commit
841439a
pushed by
Randomname653
24s
main
main
24s
View workflow file
Setup coverage, backend half: pitcher on first run, reconfigure after it
Bandit
#17:
Commit
c0af9b0
pushed by
Randomname653
22s
main
main
22s
View workflow file
Glance tile: library-enriched share, not watched-titles share
Bandit
#16:
Commit
d07a9e5
pushed by
Randomname653
23s
main
main
23s
View workflow file
Frontend: a literal newline inside a JS string broke the whole app
Bandit
#15:
Commit
5c554ad
pushed by
Randomname653
23s
main
main
23s
View workflow file
v1.0.1-beta: version bump + the security-pass changelog section
Bandit
#14:
Commit
c4405fb
pushed by
Randomname653
24s
main
main
24s
View workflow file
Blank URL values in .env no longer brick startup
Bandit
#13:
Commit
46233d3
pushed by
Randomname653
24s
main
main
24s
View workflow file
An empty JWT secret now refuses to sign - and says why
Bandit
#12:
Commit
c91a88e
pushed by
Randomname653
25s
main
main
25s
View workflow file
OpenSSF Best Practices badge joins Scorecard in the header
Bandit
#11:
Commit
ba777cd
pushed by
Randomname653
22s
main
main
22s
View workflow file
⚡ Bolt: Cache process classifications to avoid redundant DB reads
Bandit
#10:
Pull request
#70
opened by
Randomname653
22s
bolt-process-monitor-cache-6602150750707429011
bolt-process-monitor-cache-6602150750707429011
22s
View #70
View workflow file
PyJWT replaces python-jose; Bandit false positives justified in code
Bandit
#9:
Commit
0da51ad
pushed by
Randomname653
23s
main
main
23s
View workflow file
Process-monitor polls memoized 10s, invalidated on classify; bot roun…
Bandit
#8:
Commit
68dc221
pushed by
Randomname653
26s
main
main
26s
View workflow file
🎨 Palette: [UX improvement] Add aria-label to Reclassify buttons
Bandit
#7:
Pull request
#69
opened by
Randomname653
22s
UX-improvement-aria-labels-15497283445653881304
UX-improvement-aria-labels-15497283445653881304
22s
View #69
View workflow file
Scanner-alert sweep: 20 of 38 fixed in code, the rest documented
Bandit
#6:
Commit
55ccd07
pushed by
Randomname653
22s
main
main
22s
View workflow file
CHANGELOG: the v1.0.0-beta section
Bandit
#5:
Commit
315bc51
pushed by
Randomname653
23s
main
main
23s
View workflow file
Previous
1
2
Next
You can’t perform that action at this time.