Version updated for https://github.com/UnboundCompute/lachesis-action to version v1.2.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action builds a compiler-precise code property graph of your repo, traces untrusted input to dangerous sinks, and automates security auditing by emitting reviewable SARIF from your own runner. It identifies missing authorization checks in sibling functions that reach the same sink, providing inline comments on pull requests when enabled.

Version updated for https://github.com/UnboundCompute/lachesis-action to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action builds a code property graph of your repo, traces untrusted input to dangerous sinks, and emits reviewable SARIF from your own runner. It helps find missing authorization checks in your code, providing inline comments on pull requests with Lachesis bot signatures if the optional poster is enabled.

Version updated for https://github.com/UnboundCompute/lachesis-action to version v1.0.5. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Lachesis is a GitHub Action that analyzes your codebase to identify potential security vulnerabilities, specifically focusing on missing authorization checks. It builds a code property graph of your repository and traces untrusted input to dangerous sinks, posting findings as inline comments with severity levels such as error or note. The action runs entirely locally using your runner and can be integrated into workflows to automatically scan pull requests for security issues.

Version updated for https://github.com/UnboundCompute/lachesis-action to version v1.0.4. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Lachesis is a GitHub Action that automatically analyzes your code to find missing or insufficient authorization checks in functions that lead to dangerous sinks. It builds a compiler-precise code property graph, traces untrusted input to sinks, and posts findings as inline comments on pull requests, with the severity level based on whether the function guards the sink or not. This helps developers identify potential security vulnerabilities early in the development process.

Version updated for https://github.com/UnboundCompute/lachesis-action to version v1.0.3. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action builds a code property graph of your repository, traces untrusted input to dangerous sinks, and reports them directly into GitHub Code Scanning as inline annotations on pull requests. It uses a compiler-precise approach to identify guard differentials, where one function guards against untrusted input while another does not.