@pulumi/okta
A Pulumi package for creating and managing okta resources.. Based on terraform-provider-okta: version v7.0.0
72%
Total Score
caution
Active, well-documented releases are offset by overprivileged GitHub automation and broad secret exposure.
Health Score Breakdown
The repository uses a build tool, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.
All 22 workflows were analyzed, with no untrusted checkouts or script injections, but high-confidence findings show broad GitHub App permissions and a workflow injecting the entire secrets context; high-confidence template-injection findings add hygiene risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10151 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @pulumi/okta is vulnerable to Information Disclosure in versions 1.0.0 - 4.9.0. | 1.0.0 - 4.9.0 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @pulumi/pulumi Version ^3.142.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 7 years ago
- Unpacked Size
- 4.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.