Highlights
Credential Leak: 2 prior fixes. Scrutinize any change in this area.
GitHub: most-fixed (2 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Credential Leak: GitHub runner authorization tokens can be persisted in the local git configuration during checkout, making them accessible to subsequent steps in the CI/CD pipeline. This increases the risk of token exfiltration if downstream steps run untrusted code or third-party actions.