portrailofbits·trailofbits· v1.0.0 · atualizado em 2026-04-10
79
Score
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.