webproject-xyz/codeception-module-ai-reporter

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though active development and security scanning partly compensate.

Workflow auditcaution

The single workflow has no untrusted checkout or script-injection findings and pins its analyzed action, but it uses top-level write permissions and a high-confidence medium-severity secrets-inherit finding. Those credentials broaden workflow exposure and warrant review.