Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
junit-team/junit5
main @ 9cd9a3c
12
Fixes
0
CVEs
CRITICAL
Peak severity
54.5%
Coverage
Highlights
Privilege Escalation: 3 prior fixes. Scrutinize any change in this area.
Gradle: most-fixed (3 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Privilege Escalation: Multiple workflows relied on GitHub's default token permissions, allowing unintended write access; fixes explicitly narrowed permissions per job.
Command Injection: Shell commands directly expanded template variables (printf/curl/java), enabling injection; fix moved values into environment variables.
Credential Exposure: actions/checkout persisted git credentials by default, increasing exposure risk; fix disabled persistence.