Trouble with GitHub security
Dev tooling2 posts from 2 people2d active+00 posts in the last 7 days, 1 the 7 days before (fading)Unverified
Posts per day
The posts behind it
2, newest firstgithubactions_workflow_security_scan reports PASS for every repository with zizmor >= 1.27.0### Steps to Reproduce ### Expected behavior FAIL findings. zizmor reports 10 issues for that repository: ### Actual Result with Screenshots or Logs ### How did you install Prowler? Cloning the repository from github.com (git clone), master at `61d2cc55c`. zizmor 1.30.1 from...prowler-cloud/prowler · YoshiBigSmokeOpen ↗Update the security policy: private vulnerability reporting and security@ replace the Bugcrowd-only policy## Summary The repository's security policy (`.github/security.md`) still directs reporters to the Bugcrowd VDP and states that reports sent through any other channel "will not be reviewed and will be dismissed". That contradicts `crewai.com/.well-known/security.txt`, which...crewAIInc/crewAI · stepchanges1 repliesOpen ↗
Companies and products named
About this problem
Evidence
2 posts from 2 people in 2 places, about 1 a week over 21 days. Mostly on crewAIInc/crewAI, prowler-cloud/prowler. Tools named alongside: CrewAI, Factory, Docker, PyPI.
Frustration Frustration 0 of 3· Seen on GitHub issues
How it was grouped
Posts about GitHub with no known issue, sharing the word "security". First post Sep 22, 2026, latest Oct 12, 2026. Unverified: fewer than 3 posts, or one person or place only. Method
Other GitHub problems
Trouble with GitHub terminalTrouble with GitHub nextGitHub dependency conflicts break installsTrouble with GitHub checkGitHub outages and slowdowns disrupt workMigrating to or off GitHub is slow and riskyGitHub rate limits and usage caps block workRAG on GitHub returns irrelevant or missing contextTrouble with GitHub testGitHub lock-in makes switching costlyTrouble with GitHub proxyGitHub vulnerabilities are hard to triage and patch
History
steady to fading
Trouble with GitHub security (2 posts)