Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

php-parallel-lint/php-console-color

              master @ 2778d58
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Credential Leak: 1 prior fix. Scrutinize any change in this area.

.github/workflows/cs.yml: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Supply Chain: Unpinned action tags allow tag mutation, enabling malicious code injection into the build pipeline. This is the highest risk due to direct execution of third-party code with repository secrets.

Credential Leak: Default persist-credentials on actions/checkout stores the GitHub token in .git/config, which can be exfiltrated via artifact uploads or logs.