evernote-deploy-integration
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyreferences/implementation-guide.md
LOWAnomalyLOW
references/implementation-guide.md
No clear malicious behavior is present. The code describes conventional deployment workflows, but it contains meaningful security risks: publicly exposed services, unauthenticated Cloud Run access, mutable latest image tags, broad Lambda secret permissions, and potentially exposed credentials in infrastructure state or rendered Kubernetes manifests. These issues warrant remediation and review of the surrounding network, authentication, CI permissions, and secret-management configuration.
Confidence: 97%Severity: 68%
Audit Metadata