Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
NVIDIA
/
SkillSpector
Public
Notifications
You must be signed in to change notification settings
Fork
1.5k
Star
17.1k
Code
Issues
61
Pull requests
74
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Actions: NVIDIA/SkillSpector
Actions
All workflows
Workflows
CI
CI
Copilot
Copilot
OSV-Scanner
OSV-Scanner
Publish GitHub Release
Publish GitHub Release
Scorecard supply-chain security
Scorecard supply-chain security
Update PR branches
Update PR branches
Show more workflows...
Management
Caches
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
1,319 workflow runs
1,319 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
fix(e2): exempt child-process env pass-through from harvesting
CI
#1138:
Pull request
#492
synchronize by
malinfossum
18m 55s
malinfossum:malinfossum/e2-child-process-env-passthrough
malinfossum:malinfossum/e2-child-process-env-passthrough
18m 55s
View #492
View workflow file
docs(readme): document AS1-AS3 agent snooping patterns
CI
#1137:
Pull request
#476
synchronize by
evgenyt-res
14m 5s
evgenyt-res:fix/document-as1-as2-as3-patterns
evgenyt-res:fix/document-as1-as2-as3-patterns
14m 5s
View #476
View workflow file
docs(readme): document AS1-AS3 agent snooping patterns
CI
#1136:
Pull request
#476
synchronize by
evgenyt-res
3m 15s
evgenyt-res:fix/document-as1-as2-as3-patterns
evgenyt-res:fix/document-as1-as2-as3-patterns
3m 15s
View #476
View workflow file
docs(readme): document AS1-AS3 agent snooping patterns
CI
#1135:
Pull request
#476
synchronize by
evgenyt-res
18m 41s
evgenyt-res:fix/document-as1-as2-as3-patterns
evgenyt-res:fix/document-as1-as2-as3-patterns
18m 41s
View #476
View workflow file
fix: oversized files must not produce a zero-finding report (LLM-stage inclusion + AE7 coverage finding)
CI
#1134:
Pull request
#509
synchronize by
eitanch228
13m 49s
eitanch228:main
eitanch228:main
13m 49s
View #509
View workflow file
fix: flag module __dict__ subscript as reflective attribute access
CI
#1133:
Pull request
#517
synchronize by
eitanch228
17m 13s
eitanch228:upstream-main
eitanch228:upstream-main
17m 13s
View #517
View workflow file
Fix false local references from slash-separated prose
CI
#1132:
Pull request
#451
synchronize by
Tomauskasz
12m 30s
Tomauskasz:fix/reference-prose-false-positives
Tomauskasz:fix/reference-prose-false-positives
12m 30s
View #451
View workflow file
feat(providers): add current GPT budgets to OpenAI and Azure registries
CI
#1131:
Pull request
#539
opened by
Yoseph-Zuskin
17m 40s
Yoseph-Zuskin:feat/latest-openai-models
Yoseph-Zuskin:feat/latest-openai-models
17m 40s
View #539
View workflow file
feat(analyzer): add OpenCode-native SkillSpector invocation skill and tool
CI
#1130:
Pull request
#537
opened by
Yoseph-Zuskin
18m 42s
Yoseph-Zuskin:feat/opencode-plugin
Yoseph-Zuskin:feat/opencode-plugin
18m 42s
View #537
View workflow file
feat(providers): add opencode_cli semantic-scan provider
CI
#1129:
Pull request
#536
opened by
Yoseph-Zuskin
17m 36s
Yoseph-Zuskin:feat/opencode-cli-provider
Yoseph-Zuskin:feat/opencode-cli-provider
17m 36s
View #536
View workflow file
fix(e2): match shell env harvesting across grep flags and quoting
CI
#1128:
Pull request
#483
synchronize by
MandoCodes1
18m 53s
MandoCodes1:fix/e2-shell-env-harvest
MandoCodes1:fix/e2-shell-env-harvest
18m 53s
View #483
View workflow file
fix(e2): match shell env harvesting across grep flags and quoting
CI
#1127:
Pull request
#483
synchronize by
MandoCodes1
17m 37s
MandoCodes1:fix/e2-shell-env-harvest
MandoCodes1:fix/e2-shell-env-harvest
17m 37s
View #483
View workflow file
fix(discovery): report skipped symlinked skills
CI
#1126:
Pull request
#499
synchronize by
deepujain
17m 34s
deepujain:fix/495-recursive-symlink-coverage
deepujain:fix/495-recursive-symlink-coverage
17m 34s
View #499
View workflow file
feat(cli): add fail-on-findings option
CI
#1125:
Pull request
#469
synchronize by
deepujain
17m 42s
deepujain:feat/448-fail-on-findings
deepujain:feat/448-fail-on-findings
17m 42s
View #469
View workflow file
fix(cli): defer graph initialization
CI
#1124:
Pull request
#436
synchronize by
deepujain
19m 1s
deepujain:fix/435-lazy-graph
deepujain:fix/435-lazy-graph
19m 1s
View #436
View workflow file
fix(references): ignore scoped npm package specs in plain relative paths
CI
#1123:
Pull request
#532
opened by
rksharma-owg
13m 44s
rksharma-owg:fix/scoped-npm-package-references
rksharma-owg:fix/scoped-npm-package-references
13m 44s
View #532
View workflow file
fix(supply-chain): prefer exact known-package matches in SC6
CI
#1122:
Pull request
#530
opened by
agentsope
12m 58s
agentsope:fix/sc6-known-package-match
agentsope:fix/sc6-known-package-match
12m 58s
View #530
View workflow file
fix(analyzer): stop AR2 scoring a negated warning mandate as suppression
CI
#1121:
Pull request
#461
synchronize by
AmirF194
16m 54s
AmirF194:fix/440-ar2-negated-warning-mandate
AmirF194:fix/440-ar2-negated-warning-mandate
16m 54s
View #461
View workflow file
fix(ea1): reject footnote-legend '*', bound pre-colon gap, detect YAML block-list and JSON wildcard grants
CI
#1120:
Pull request
#447
synchronize by
github-actions
Bot
Action required
yashrajp22/ea1-wildcard-remaining-gaps
yashrajp22/ea1-wildcard-remaining-gaps
Action required
View #447
View workflow file
fix(security): detect letter-spaced P3 and P4 prompts
CI
#1119:
Pull request
#470
synchronize by
github-actions
Bot
Action required
codex/p3-p4-no-llm-followup
codex/p3-p4-no-llm-followup
Action required
View #470
View workflow file
fix(yara): require corroborating webshell markers
CI
#1118:
Pull request
#489
synchronize by
github-actions
Bot
Action required
codex/fix-webshell-signature-precision
codex/fix-webshell-signature-precision
Action required
View #489
View workflow file
fix(scripts): convert editable file URLs portably
CI
#1117:
Pull request
#490
synchronize by
github-actions
Bot
Action required
codex/fix-editable-file-url-conversion
codex/fix-editable-file-url-conversion
Action required
View #490
View workflow file
fix: keep runtime-selected printf reconstruction incomplete
CI
#1116:
Pull request
#514
synchronize by
github-actions
Bot
Action required
codex/fix-runtime-command-completeness
codex/fix-runtime-command-completeness
Action required
View #514
View workflow file
fix(analyzer): project manifest version for RP3
Publish GitHub Release
#104:
Pull request
#474
closed by
rng1995
1s
agentsope:fix/rp3-manifest-version
agentsope:fix/rp3-manifest-version
1s
View #474
View workflow file
fix(analyzer): project manifest version for RP3 (#474)
Update PR branches
#52:
Commit
1c0eb56
pushed by
rng1995
36s
main
main
36s
View workflow file
Previous
1
2
3
4
5
…
52
53
Next
You can’t perform that action at this time.