google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
Apache License 2.0
860 stars 178 forks source link

Zenml weak credentials #491

Closed secureness closed 1 week ago

secureness commented 1 month ago

PRP: https://github.com/google/tsunami-security-scanner-plugins/issues/444 testbeds: https://github.com/google/security-testbeds/pull/57

leonardo-doyensec commented 2 weeks ago

LGTM - Approved @maoning we can merge this. Moreover we can also merge the security testbed

Reviewer: Leonardo, Doyensec Plugin: ZenML Weak Credentials Detector Feedback: The overall quality is decent. The testbed required several back and forth in order to make it working properly. The plugin is working correctly, however several unused packages were found. Drawback: None.