Rank#1890
- Created
- 10 months ago
- Last commit
- 19 hours ago
- Latest release
- v2026.9.66 days ago
Security Findings
3pull_request_target with secrets
MaliciousLineage[.github/workflows/auto-response.yml] pull_request_target with secrets
Unpinned dependencies
SuspiciousLineage2 unpinned: @openclaw/ai, @openclaw/session-url-contract
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l
Editions
3- 2026.9.6Scanned Sep 28, 2026, 08:03 PMMedium
- 2026.9.5Scanned Sep 19, 2026, 08:03 PMMedium
- 2026.7.1Scanned Aug 4, 2026, 03:33 PMMedium