Scans

Discover Well-Known paths and leaked files #171

Sign in to view logs

Triggered via pull request December 22, 2024 11:23

emmanuelgautier

opened #240

discover-well-known-paths

Status Success

Total duration 1m 7s

Artifacts –

scans.yml

on: pull_request

Strong API Key Scan

API Key in header Scan

Bearer API Key Scan

Strong HTTP Basic Scan

Matrix: GraphQL Scans

Matrix: HTTP Misconfigurations Scans

Matrix: JWT Scans

Matrix: OpenAPI Scans

Annotations

24 warnings

Strong HTTP Basic Scan

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

API Key in header Scan

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_cookies, http://localhost:8080/cookies/not-ht...

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

JWT Scans (jwt-null-signature)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_headers, http://localhost:8080)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_method_override, http://localhost:8080/cookie...

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_headers, http://localhost:8080/headers/csp-fr...

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

JWT Scans (jwt-not-verified)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

JWT Scans (jwt-alg-none-bypass)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

GraphQL Scans (graphql.introspection_enabled, http://localhost:4000/graphql)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_cookies, http://localhost:8080/cookies/no-exp...

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_cookies, http://localhost:8080/cookies/samesi...

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

API Discovery

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

Strong API Key Scan

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

JWT Scans (jwt-blank-secret)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

Bearer API Key Scan

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_cookies, http://localhost:8080/cookies/unsecure)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

HTTP Misconfigurations Scans (misconfiguration.http_headers, http://localhost:8080/headers/cors-w...

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

OpenAPI Scans (simple_api_key.openapi.json)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

OpenAPI Scans (simple_http_bearer_jwt.openapi.json)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

OpenAPI Scans (complex.openapi.json)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

JWT Scans (jwt-weak-hmac-secret)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

OpenAPI Scans (simple_http_bearer.openapi.json)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

OpenAPI Scans (petstore.openapi.json)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636