Bret Comnes
May 3, 2023
The Socket GitHub app now runs Project Health Reports on the default branch instead of in pull requests. Previously, Project Health Reports were only run in the pull request context, along side pull request alert scanning. After usage feedback and building a better understanding how these reports are being used, we decided to run them on all new commits created on the default branch of repositories.
Photo by Simon Launay on Unsplash
Subscribe to our newsletter
Get notified when we publish new security blog posts!
Research
Security News
The Socket Research team found this npm package includes code for collecting sensitive developer information, including your operating system username, Git username, and Git email.
Security News
OpenJS is warning of social engineering takeovers targeting open source projects after receiving a credible attempt on the foundation.
Company News
Come meet the Socket team at BSidesSF and RSA! We're sponsoring several fun networking events and we would love to see you there.
