Unpacking Security Scanners for GitHub Actions Workflows

cs.SE, cs.CR

Submitted: 2026-01-20

Updated: 2026-10-19

Comments: 19 pages, 7 figures, 6 tables

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties