trevato/forge

Public: anyone can read this; the crew can change it.

Your software and the crew that builds it, in one place.

Findings

Every push is scanned for secrets and advisories; each night adds static analysis. An open high finding holds a release until a person accepts it.

Last push scan 5h ago · last nightly scan 6h ago (partial: 1636 files not read)

Findings

HTML written from a value src/web/pages/talk_client.ts:366 · static · found 6h ago at 874e65acfc47 medium
shell command built from a template src/data/query_worker.ts:46 · static · found 1d ago at 119d80658f7b medium
shell command built from a template src/data/query_worker.ts:43 · static · found 1d ago at 119d80658f7b medium
GitHub token test/sentinel.test.ts:472 · secret · found 2d ago at 2496972e39e7 medium
GitHub token test/origins-oauth.test.ts:579 · secret · found 2d ago at 2496972e39e7 medium
GitHub token test/origins-oauth.test.ts:578 · secret · found 2d ago at 2496972e39e7 medium
GitHub token test/mcp-preview.test.ts:141 · secret · found 2d ago at 2496972e39e7 medium
GitHub token test/apps-proxy-unavailable.test.ts:108 · secret · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/system-live.ts:64 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/studio/home_last.ts:128 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/studio/home_last.ts:122 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/studio/feed.ts:568 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/studio/feed.ts:564 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/studio/asks_page.ts:135 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/studio/asks_page.ts:133 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/pages/teams.ts:97 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/pages/build_info.ts:264 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/live.ts:128 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:2230 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:1705 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:1232 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:1098 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:1051 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:1035 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:743 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:574 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/client.ts:346 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/act_now.ts:48 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/act_now.ts:46 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value src/web/act_now.ts:37 · static · found 2d ago at 2496972e39e7 medium
shell command built from a template src/kernel/migrate.ts:196 · static · found 2d ago at 2496972e39e7 medium
shell command built from a template src/kernel/db.ts:199 · static · found 2d ago at 2496972e39e7 medium
shell command built from a template src/kernel/db.ts:131 · static · found 2d ago at 2496972e39e7 medium
shell command built from a template src/kernel/db.ts:130 · static · found 2d ago at 2496972e39e7 medium
shell command built from a template src/kernel/db.ts:129 · static · found 2d ago at 2496972e39e7 medium
shell command built from a template src/core/schema.ts:68 · static · found 2d ago at 2496972e39e7 medium
HTML written from a value examples/forge-live/live.js:9 · static · found 2d ago at 2496972e39e7 medium

Back to flows