Created
May 28, 2023 15:36
-
-
Save jossef/580bd94658c2fc8809ff251c0b7bb30a to your computer and use it in GitHub Desktop.
Mass Scanning of Popular GitHub Repos for CI Misconfiguration
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Repo | Repo Stars | |
|---|---|---|
| https://github.com/kong/insomnia | 28262 | |
| https://github.com/mattermost/focalboard | 15181 | |
| https://github.com/baidu/amis | 13949 | |
| https://github.com/shopify/liquid | 10258 | |
| https://github.com/fullstorydev/grpcurl | 8665 | |
| https://github.com/dagger/dagger | 8340 | |
| https://github.com/draios/sysdig | 7271 | |
| https://github.com/pinterest/ktlint | 5581 | |
| https://github.com/shopify/polaris | 5346 | |
| https://github.com/shopify/react-native-skia | 5134 | |
| https://github.com/baidu/san | 4661 | |
| https://github.com/line/armeria | 4263 | |
| https://github.com/fullstorydev/grpcui | 4157 | |
| https://github.com/square/valet | 3868 | |
| https://github.com/shopify/hydrogen-v1 | 3803 | |
| https://github.com/shopify/flash-list | 3746 | |
| https://github.com/baidu/braft | 3533 | |
| https://github.com/stripe/stripe-node | 3350 | |
| https://github.com/databricks/koalas | 3266 | |
| https://github.com/amzn/style-dictionary | 3224 | |
| https://github.com/linkedin/dustjs | 2916 | |
| https://github.com/lyft/cartography | 2665 | |
| https://github.com/shopify/bootsnap | 2595 | |
| https://github.com/uber/react-digraph | 2507 | |
| https://github.com/kong/unirest-java | 2442 | |
| https://github.com/shopify/restyle | 2331 | |
| https://github.com/intuit/auto | 2019 | |
| https://github.com/kong/kubernetes-ingress-controller | 1916 | |
| https://github.com/twitter/pelikan | 1876 | |
| https://github.com/shopify/identity_cache | 1858 | |
| https://github.com/ericsson/codechecker | 1827 | |
| https://github.com/mattermost/desktop | 1818 | |
| https://github.com/stripe/stripe-ruby | 1802 | |
| https://github.com/pinterest/teletraan | 1786 | |
| https://github.com/akamai/boomerang | 1783 | |
| https://github.com/linkedin/dexmaker | 1757 | |
| https://github.com/lyft/confidant | 1755 | |
| https://github.com/line/line-bot-sdk-python | 1661 | |
| https://github.com/linkedin/ambry | 1629 | |
| https://github.com/shopify/kubeaudit | 1622 | |
| https://github.com/couchbase/couchbase-lite-ios | 1584 | |
| https://github.com/gocardless/statesman | 1569 | |
| https://github.com/shopify/quilt | 1567 | |
| https://github.com/instacart/lore | 1550 | |
| https://github.com/lyft/clutch | 1486 | |
| https://github.com/databricks/click | 1404 | |
| https://github.com/stripe/stripe-python | 1369 | |
| https://github.com/instacart/truetime-android | 1320 | |
| https://github.com/shopify/krane | 1307 | |
| https://github.com/kong/docker-kong | 1279 | |
| https://github.com/twitter/compose-rules | 1234 | |
| https://github.com/aiven/pghoard | 1223 | |
| https://github.com/shopify/packwerk | 1205 | |
| https://github.com/bytecodealliance/javy | 1194 | |
| https://github.com/lyft/mapper | 1174 | |
| https://github.com/pinterest/knox | 1159 | |
| https://github.com/linkedin/parseq | 1149 | |
| https://github.com/stripe/stripe-android | 1101 | |
| https://github.com/baidu/baikaldb | 1051 | |
| https://github.com/line/promgen | 989 | |
| https://github.com/maticnetwork/contracts | 929 | |
| https://github.com/baidu/cup | 911 | |
| https://github.com/shopify/job-iteration | 907 | |
| https://github.com/shopify/js-buy-sdk | 907 | |
| https://github.com/square/workflow-kotlin | 907 | |
| https://github.com/baidu/starlight | 902 | |
| https://github.com/draios/sysdig-inspect | 898 | |
| https://github.com/sendgrid/sendgrid-go | 895 | |
| https://github.com/braintree/credit-card-type | 893 | |
| https://github.com/dbt-labs/metricflow | 893 | |
| https://github.com/instacart/makara | 886 | |
| https://github.com/line/line-bot-sdk-nodejs | 873 | |
| https://github.com/shopify/cli-ui | 868 | |
| https://github.com/shopify/ruby-lsp | 847 | |
| https://github.com/discord/airhornbot | 841 | |
| https://github.com/line/line-bot-sdk-go | 816 | |
| https://github.com/braintree/card-validator | 806 | |
| https://github.com/line/line-sdk-ios-swift | 805 | |
| https://github.com/checkpointsw/karta | 801 | |
| https://github.com/atlassian/react-sweet-state | 782 | |
| https://github.com/twitter/scrooge | 776 | |
| https://github.com/square/paralayout | 763 | |
| https://github.com/shopify/react-native-performance | 732 | |
| https://github.com/linkedin/opticss | 716 | |
| https://github.com/metamask/eth-phishing-detect | 711 | |
| https://github.com/coinbase/salus | 706 | |
| https://github.com/shopify/maintenance_tasks | 704 | |
| https://github.com/uber/h3-js | 700 | |
| https://github.com/pinterest/pymemcache | 700 | |
| https://github.com/shopify/remote-ui | 696 | |
| https://github.com/braintree/runbook | 696 | |
| https://github.com/line/line-bot-sdk-php | 677 | |
| https://github.com/infinidat/munch | 672 | |
| https://github.com/1debit/alternat | 670 | |
| https://github.com/uber/h3-py | 645 | |
| https://github.com/square/blueprint | 637 | |
| https://github.com/juniper/py-junos-eznc | 637 | |
| https://github.com/atlassian/escalator | 625 | |
| https://github.com/shopify/ghostferry | 596 | |
| https://github.com/line/line-bot-sdk-java | 569 | |
| https://github.com/lyft/protoc-gen-star | 561 | |
| https://github.com/shopify/hydrogen | 553 | |
| https://github.com/linkedin/coral | 548 | |
| https://github.com/metamask/snaps | 541 | |
| https://github.com/line/centraldogma | 531 | |
| https://github.com/linkedin/litr | 530 | |
| https://github.com/dell/dkms | 527 | |
| https://github.com/metamask/eth-sig-util | 526 | |
| https://github.com/shopify/pitchfork | 515 | |
| https://github.com/atlassian/github-for-jira | 513 | |
| https://github.com/appsflyer/go-sundheit | 513 | |
| https://github.com/lyft/flinkk8soperator | 506 | |
| https://github.com/metamask/metamask-docs | 496 | |
| https://github.com/metamask/test-dapp | 477 | |
| https://github.com/adobe/aem-project-archetype | 473 | |
| https://github.com/line/line-bot-sdk-ruby | 466 | |
| https://github.com/shopify/erb-lint | 464 | |
| https://github.com/maticnetwork/matic.js | 454 | |
| https://github.com/line/kotlin-jdsl | 452 | |
| https://github.com/snowflakedb/snowflake-connector-python | 451 | |
| https://github.com/grab/cocoapods-binary-cache | 450 | |
| https://github.com/indeedeng/proctor | 448 | |
| https://github.com/lyft/metadataproxy | 446 | |
| https://github.com/yahoo/fetchr | 445 | |
| https://github.com/uber/grafana-dash-gen | 445 | |
| https://github.com/couchbase/sync_gateway | 445 | |
| https://github.com/databricks/spark-xml | 444 | |
| https://github.com/ericsson/codecompass | 434 | |
| https://github.com/amzn/pecos | 433 | |
| https://github.com/stripe/rainier | 433 | |
| https://github.com/shopify/mobile-buy-sdk-ios | 424 | |
| https://github.com/doctolib/safe-pg-migrations | 403 | |
| https://github.com/discord/overlappingpanels | 401 | |
| https://github.com/shopify/ruby-style-guide | 396 | |
| https://github.com/braintree/braintree_android | 392 | |
| https://github.com/imperva/automatic-api-attack-tool | 388 | |
| https://github.com/branchmetrics/android-branch-deep-linking-attribution | 380 | |
| https://github.com/yahoo/react-i13n | 379 | |
| https://github.com/shopify/bootboot | 374 | |
| https://github.com/linkedin/spyglass | 370 | |
| https://github.com/kong/deck | 368 | |
| https://github.com/metamask/contract-metadata | 367 | |
| https://github.com/kong/unirest-ruby | 366 | |
| https://github.com/grab/cocoapods-pod-merge | 363 | |
| https://github.com/lyft/cni-ipvlan-vpc-k8s | 358 | |
| https://github.com/atlassian/gostatsd | 358 | |
| https://github.com/f5networks/f5-ansible | 355 | |
| https://github.com/braintree/android-card-form | 354 | |
| https://github.com/linkedin/venice | 353 | |
| https://github.com/gettengineering/prism | 352 | |
| https://github.com/lyft/nuscenes-devkit | 350 | |
| https://github.com/1password/shell-plugins | 346 | |
| https://github.com/uber/cadence-web | 341 | |
| https://github.com/agoric/realms-shim | 328 | |
| https://github.com/indeedeng/iwf | 324 | |
| https://github.com/epam/ketcher | 322 | |
| https://github.com/epicgames/thirdparty | 322 | |
| https://github.com/gocardless/airflow-dbt | 321 | |
| https://github.com/hellofresh/eks-rolling-update | 320 | |
| https://github.com/databricks/terraform-provider-databricks | 319 | |
| https://github.com/aiven/karapace | 305 | |
| https://github.com/exodusmovement/redux-watch | 302 | |
| https://github.com/amplitude/amplitude-javascript | 301 | |
| https://github.com/shopify/product-reviews-sample-app | 300 | |
| https://github.com/kiwicom/pytest-recording | 295 | |
| https://github.com/line/decaton | 285 | |
| https://github.com/appsflyer/donkey | 281 | |
| https://github.com/agoric/agoric-sdk | 278 | |
| https://github.com/f5networks/k8s-bigip-ctlr | 277 | |
| https://github.com/hellofresh/klepto | 276 | |
| https://github.com/linkedin/transport | 276 | |
| https://github.com/epicgames/pixelstreaminginfrastructure | 275 | |
| https://github.com/discord/discord-interactions-js | 268 | |
| https://github.com/yahoo/oak | 263 | |
| https://github.com/epam/mriviewer | 262 | |
| https://github.com/paypal/nemo-core | 259 | |
| https://github.com/f5networks/f5-common-python | 249 | |
| https://github.com/grab/grazel | 248 | |
| https://github.com/shopify/money | 245 | |
| https://github.com/maticnetwork/pos-portal | 241 | |
| https://github.com/couchbase/couchbase-lite-core | 237 | |
| https://github.com/shopify/better-html | 234 | |
| https://github.com/faire/mjml-react | 231 | |
| https://github.com/expediagroup/waggle-dance | 223 | |
| https://github.com/checkmarx/capital | 222 | |
| https://github.com/crowdstrike/falconpy | 221 | |
| https://github.com/shopify/polaris-viz | 218 | |
| https://github.com/maticnetwork/dagger.js | 217 | |
| https://github.com/metamask/logo | 215 | |
| https://github.com/atlassian/better-ajv-errors | 213 | |
| https://github.com/mattermost/mattermost-push-proxy | 213 | |
| https://github.com/atlassian/browser-interaction-time | 209 | |
| https://github.com/hewlettpackard/squest | 209 | |
| https://github.com/intuit/katlas | 206 | |
| https://github.com/metamask/detect-provider | 204 | |
| https://github.com/line/rules_apple_line | 204 | |
| https://github.com/linkedin/isolation-forest | 202 | |
| https://github.com/line/flutter_line_sdk | 199 | |
| https://github.com/shopify/mobile-buy-sdk-android | 198 | |
| https://github.com/messagebird/sachet | 198 | |
| https://github.com/metamask/keyringcontroller | 192 | |
| https://github.com/braintree/braintree-web-drop-in | 189 | |
| https://github.com/shopify/cli | 186 | |
| https://github.com/roblox/nomad-driver-containerd | 184 | |
| https://github.com/aristanetworks/ansible-avd | 182 | |
| https://github.com/metamask/core | 182 | |
| https://github.com/docusign/docusign-esign-php-client | 182 | |
| https://github.com/twilio/twilio-go | 182 | |
| https://github.com/shopify/rotoscope | 180 | |
| https://github.com/kong/docs.konghq.com | 179 | |
| https://github.com/kong/lua-resty-worker-events | 179 | |
| https://github.com/braintree/pg_ha_migrations | 179 | |
| https://github.com/expediagroup/bull | 178 | |
| https://github.com/armory/spinnaker-operator | 178 | |
| https://github.com/shopify/git-chain | 176 | |
| https://github.com/braintree/braintree_express_example | 175 | |
| https://github.com/kong/charts | 175 | |
| https://github.com/expediagroup/jenkins-spock | 175 | |
| https://github.com/atlassian/extract-react-types | 174 | |
| https://github.com/metamask/providers | 173 | |
| https://github.com/brexhq/substation | 173 | |
| https://github.com/mattermost/mattermost-plugin-jitsi | 170 | |
| https://github.com/aiven/pglookout | 169 | |
| https://github.com/dopplerhq/cli | 168 | |
| https://github.com/couchbase/fleece | 166 | |
| https://github.com/coinbase/cbpay-js | 165 | |
| https://github.com/line/lich | 165 | |
| https://github.com/linkedin/lift | 165 | |
| https://github.com/coinbase/rosetta-sdk-go | 163 | |
| https://github.com/pinterest/singer | 162 | |
| https://github.com/amplitude/amplitude-android | 159 | |
| https://github.com/metamask/eth-json-rpc-middleware | 158 | |
| https://github.com/shopify/heap-profiler | 158 | |
| https://github.com/shopify/app_profiler | 156 | |
| https://github.com/epsagon/clear-lambda-storage | 154 | |
| https://github.com/blend/go-sdk | 154 | |
| https://github.com/square/listable | 154 | |
| https://github.com/pinterest/git-stacktrace | 153 | |
| https://github.com/apptio/kr8 | 153 | |
| https://github.com/mattermost/mattermost-helm | 153 | |
| https://github.com/aristanetworks/purescript-backend-optimizer | 152 | |
| https://github.com/coinbase/temporal-ruby | 152 | |
| https://github.com/1password/op-vscode | 151 | |
| https://github.com/snowflakedb/snowpark-python | 151 | |
| https://github.com/atlassian/stricter | 151 | |
| https://github.com/paypal/skipto | 149 | |
| https://github.com/shopify/ci-queue | 148 | |
| https://github.com/roblox/foreman | 148 | |
| https://github.com/checkpointsw/scout | 148 | |
| https://github.com/pinterest/ptracer | 147 | |
| https://github.com/snowflakedb/snowflake-jdbc | 146 | |
| https://github.com/braintree/framebus | 145 | |
| https://github.com/metamask/metamask-onboarding | 144 | |
| https://github.com/indeedeng/util | 144 | |
| https://github.com/instacart/formula | 143 | |
| https://github.com/mattermost/mmctl | 143 | |
| https://github.com/fastly/go-fastly | 142 | |
| https://github.com/razorpay/razorpay-node | 141 | |
| https://github.com/thredup/rollbar-sourcemap-webpack-plugin | 141 | |
| https://github.com/hellofresh/kangal | 140 | |
| https://github.com/shopify/rubocop-sorbet | 140 | |
| https://github.com/logdna/logdna-agent | 139 | |
| https://github.com/razorpay/razorpay-python | 137 | |
| https://github.com/epam/uui | 136 | |
| https://github.com/metamask/add-token | 135 | |
| https://github.com/aquasecurity/tfsec-pr-commenter-action | 135 | |
| https://github.com/coinbase/rosetta-cli | 134 | |
| https://github.com/coinbase/wallet-mobile-sdk | 134 | |
| https://github.com/metamask/json-rpc-engine | 133 | |
| https://github.com/1password/connect-sdk-go | 132 | |
| https://github.com/databricks/dbt-databricks | 132 | |
| https://github.com/docusign/docusign-esign-node-client | 132 | |
| https://github.com/linkedin/gdmix | 132 | |
| https://github.com/armory/minnaker | 132 | |
| https://github.com/goshippo/shippo-node-client | 132 | |
| https://github.com/shopify/cli-kit | 131 | |
| https://github.com/mattermost/mattermost-plugin-github | 131 | |
| https://github.com/figma/plugin-typings | 131 | |
| https://github.com/intuit/foremast | 130 | |
| https://github.com/getoutreach/localizer | 128 | |
| https://github.com/linkedin/kafka | 127 | |
| https://github.com/metamask/eth-block-tracker | 126 | |
| https://github.com/kong/go-pdk | 124 | |
| https://github.com/gocardless/nandi | 124 | |
| https://github.com/amzn/hawktracer | 123 | |
| https://github.com/intuit/maven-build-scanner | 123 | |
| https://github.com/hellofresh/goengine | 122 | |
| https://github.com/fastly/cli | 121 | |
| https://github.com/dbt-labs/dbt-bigquery | 120 | |
| https://github.com/instacart/amountable | 119 | |
| https://github.com/atlassian/data-center-helm-charts | 119 | |
| https://github.com/razorpay/devstack | 119 | |
| https://github.com/kong/kong-pongo | 118 | |
| https://github.com/metamask/dapps | 117 | |
| https://github.com/line/line-sdk-android | 117 | |
| https://github.com/lyft/swift-index-store | 117 | |
| https://github.com/braintree/braintree-android-drop-in | 115 | |
| https://github.com/mattermost/mattermost-plugin-gitlab | 115 | |
| https://github.com/epam/miew | 115 | |
| https://github.com/shopify/browser_sniffer | 114 | |
| https://github.com/kong/lua-resty-healthcheck | 114 | |
| https://github.com/kayak/fireant | 112 | |
| https://github.com/shopify/ruby-lsp-rails | 112 | |
| https://github.com/goshippo/shippo-python-client | 112 | |
| https://github.com/fastly/viceroy | 112 | |
| https://github.com/expediagroup/stream-registry | 110 | |
| https://github.com/stripe/vscode-stripe | 110 | |
| https://github.com/square/in-app-payments-react-native-plugin | 108 | |
| https://github.com/shopify/liquid-c | 108 | |
| https://github.com/dbt-labs/dbt-docs | 107 | |
| https://github.com/kong/kongponents | 107 | |
| https://github.com/juniper/jsnapy | 106 | |
| https://github.com/paypal/nnanalytics | 106 | |
| https://github.com/shopify/ruby_memcheck | 106 | |
| https://github.com/aiven/terraform-provider-aiven | 106 | |
| https://github.com/bitsoex/bitso-py | 105 | |
| https://github.com/square/react-native-square-reader-sdk | 104 | |
| https://github.com/metamask/eth-simple-keyring | 103 | |
| https://github.com/1password/load-secrets-action | 103 | |
| https://github.com/aptos-labs/move | 103 | |
| https://github.com/crowdstrike/csproto | 102 | |
| https://github.com/linkedin/dex-test-parser | 102 | |
| https://github.com/hewlettpackard/oneview-ansible | 102 | |
| https://github.com/couchbase/couchbase-lite-c | 100 | |
| https://github.com/linkedin/datahub-gma | 100 | |
| https://github.com/fiverr/passable | 100 | |
| https://github.com/fastly/terraform-provider-fastly | 100 | |
| https://github.com/aristanetworks/netdevops-examples | 99 | |
| https://github.com/expediagroup/jarviz | 98 | |
| https://github.com/metamask/rpc-errors | 98 | |
| https://github.com/snowflakedb/snowflake-kafka-connector | 98 | |
| https://github.com/braintree/braintree-ios-drop-in | 97 | |
| https://github.com/mattermost/mattermost-plugin-zoom | 97 | |
| https://github.com/dell/dell-recovery | 96 | |
| https://github.com/coinbase/rosetta-ethereum | 96 | |
| https://github.com/fullstorydev/emulators | 95 | |
| https://github.com/linkedin/cassette | 94 | |
| https://github.com/mattermost/mattermost-operator | 94 | |
| https://github.com/metamask/browser-passworder | 93 | |
| https://github.com/mattermost/mattermost-plugin-starter-template | 93 | |
| https://github.com/gocardless/ibandit | 92 | |
| https://github.com/line/feature-flag-android | 90 | |
| https://github.com/carta/flipper-client | 90 | |
| https://github.com/f5networks/terraform-provider-bigip | 90 | |
| https://github.com/plan4hub/yoda | 90 | |
| https://github.com/docusign/docusign-esign-java-client | 89 | |
| https://github.com/shopify/omniauth-shopify-oauth2 | 89 | |
| https://github.com/shopify/paquito | 89 | |
| https://github.com/line/webpack.kr | 89 | |
| https://github.com/expediagroup/flyte | 88 | |
| https://github.com/akamai/terraform-provider-akamai | 87 | |
| https://github.com/braintree/braintree_rails_example | 86 | |
| https://github.com/checkpointsw/cp_mgmt_api_python_sdk | 86 | |
| https://github.com/dagger/dagger-for-github | 86 | |
| https://github.com/snowflakedb/snowflake-connector-nodejs | 86 | |
| https://github.com/fastly/fastly-exporter | 85 | |
| https://github.com/twitter/focus | 85 | |
| https://github.com/gocardless/gocardless-pro-php | 85 | |
| https://github.com/mattermost/mattermost-plugin-jira | 85 | |
| https://github.com/shopify/measured-rails | 85 | |
| https://github.com/kiwicom/orbit-compose | 85 | |
| https://github.com/appsflyer/pronto | 85 | |
| https://github.com/razorpay/razorpay-android-sample-app | 84 | |
| https://github.com/shopify/screenshot-glb | 84 | |
| https://github.com/adobe/himl | 83 | |
| https://github.com/snowflake-labs/dbt_constraints | 82 | |
| https://github.com/aiven/aiven-client | 81 | |
| https://github.com/braintree/braintree_spring_example | 81 | |
| https://github.com/aristanetworks/bst | 81 | |
| https://github.com/databricks/intellij-jsonnet | 81 | |
| https://github.com/shopify/prettier-plugin-liquid | 81 | |
| https://github.com/1password/ansible-onepasswordconnect-collection | 80 | |
| https://github.com/docusign/docusign-esign-python-client | 80 | |
| https://github.com/kong/go-plugins | 80 | |
| https://github.com/aiven/myhoard | 80 | |
| https://github.com/maticnetwork/node-ansible | 80 | |
| https://github.com/pinterest/orion | 80 | |
| https://github.com/metamask/template-snap-monorepo | 80 | |
| https://github.com/atlassian/build-stats | 79 | |
| https://github.com/dbt-labs/dbt-server | 79 | |
| https://github.com/lyft/omnibot | 79 | |
| https://github.com/amplitude/amplitude-typescript | 78 | |
| https://github.com/metamask/eth-hd-keyring | 78 | |
| https://github.com/doximity/simplekiq | 78 | |
| https://github.com/kong/kong-terraform-aws | 77 | |
| https://github.com/mattermost/mattermost-api-reference | 77 | |
| https://github.com/checkpointsw/cloudguardiaas | 76 | |
| https://github.com/kong/kong-build-tools | 76 | |
| https://github.com/akamai/akamaiopen-edgegrid-golang | 75 | |
| https://github.com/twitter/dict_minimize | 75 | |
| https://github.com/metamask/eth-ledger-bridge-keyring | 75 | |
| https://github.com/shopify/goose | 75 | |
| https://github.com/instacart/snacks | 75 | |
| https://github.com/databricks/databricks-vscode | 74 | |
| https://github.com/shopify/mruby-engine | 74 | |
| https://github.com/pinterest/api-quickstart | 73 | |
| https://github.com/metamask/eth-token-tracker | 73 | |
| https://github.com/shopify/function-examples | 73 | |
| https://github.com/aiven/pgtracer | 73 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment