code-review

    Review OpenVINO changes for correctness, compatibility, performance, security, testing, and maintainability. Use when reviewing a pull request or proposed diff.

    Rank#1300
    openvinotoolkittessl.ioWorkflow—Last updated Sep 29, 2026, 06:29 AMtessl.io/openvinotoolkit/openvino/code-review
    Created
    8 years ago
    Last commit
    17 hours ago
    Latest release
    2026.4.02 weeks ago

    Security Findings

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/coverity.yml] wget https://scan.coverity.com/download/linux64

    Workflow exfiltrates secrets to external host

    MaliciousLineage

    [.github/workflows/coverity.yml] wget https://scan.coverity.com/download/linux64 --progress=bar:force:noscroll --post-data "token=${{ secrets.COVERITY_TO

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/labeler.yml] pull_request_target with secrets

    Versions

    1
    • Scanned Sep 29, 2026, 06:29 AMHigh