skillcask 0.7.0 → 0.8.0
Evidence: 0 changed. Static findings: 18 new, 0 gone. Run check: 0 changed.
19
low
19
low
Evidence
0 changed, 6 the same.
Package
- Build script
- no change
- Proc macro
- no change
- links
- no change
- New dependencies
- none
Static findings
18 new, 0 gone, 175 the same. Code that only moved counts as the same.
New in 0.8.0
medium shell_command library 4
powershellsrc/skill.rs:366 src/skill.rs:419Read ~/.config/gh/hosts.yml and https://api.github.com/repos (see <https://Docs.Example.com>).\u{a}```bash\u{a}$ gh pr list --json number | jq '.[0]' && sudo git push\u{a}FOO=1 make \\u{a} continued-…src/skill.rs:591Invoke-WebRequestsrc/skill.rs:605
medium credential_access library 2
Read ~/.config/gh/hosts.yml and https://api.github.com/repos (see <https://Docs.Example.com>).\u{a}```bash\u{a}$ gh pr list --json number | jq '.[0]' && sudo git push\u{a}FOO=1 make \\u{a} continued-…src/skill.rs:591~/.config/gh/hosts.ymlsrc/skill.rs:609
medium secret_environment_variable library 2
GITHUB_TOKENsrc/skill.rs:610NPM_TOKENsrc/skill.rs:610
info url_literal library 10
{key:?} is not a package (vendor/name), github:owner/repo[/skill] or git:https://…[#skill]src/deps.rs:39https://git.example.com/team/skills.gitsrc/deps.rs:253git:http://h/a/bsrc/deps.rs:265git:https://h/asrc/deps.rs:266git:https://h/a/b#Badsrc/deps.rs:267"git:https://git.example.com/o/r.git#pr" = "^1"src/deps.rs:352https://git.example.com/o/r.gitsrc/deps.rs:360"git:https://other.example.com/o/r.git" = "^1"src/deps.rs:362://src/skill.rs:384Read ~/.config/gh/hosts.yml and https://api.github.com/repos (see <https://Docs.Example.com>).\u{a}```bash\u{a}$ gh pr list --json number | jq '.[0]' && sudo git push\u{a}FOO=1 make \\u{a} continued-…src/skill.rs:591
Run: check
Processes 0 new, 0 gone, 2 the same
The same processes ran.
Network 0 changed, 0 the same
No change.
Files 0 changed, 0 the same
No change.
Behavior
0 new, 0 gone, 5 the same.