TavernKeeper Scan Report

N0819/Sonder_Engine

Commit b2cd5ec Reviewed

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and contextual reviewer found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 10 low

What this review found

No material or immediate-danger item was identified.

Minor cautions

zizmor reported unpinned-uses

Minor caution · high confidence

The CI file uses a standard GitHub checkout action referenced by version tag instead of a locked-down hash. This is a minor hardening gap, not a security threat.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The workflow uses actions/checkout@v4, a first-party GitHub action pinned to a major version tag rather than a full commit SHA. This is a common CI practice but does not provide cryptographic integrity against tag re-pointing. The workflow permissions are restricted to contents: read, limiting blast radius. No malicious data flow is present.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/checkout to a full commit SHA for reproducibility and integrity.

Scanner
zizmor 1.28.0
Rule
unpinned-uses
File role
tooling
Source
.github/workflows/ci.yml:24

zizmor reported unpinned-uses

Minor caution · high confidence

Same as other checkout lines: standard version-tag reference instead of a locked hash. Minor hardening gap only.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The pydantic1 job uses actions/checkout@v4 pinned to a major version tag. Same minor hardening gap as the other checkout references; no malicious flow.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/checkout to a full commit SHA.

Scanner
zizmor 1.28.0
Rule
unpinned-uses
File role
tooling
Source
.github/workflows/ci.yml:56

zizmor reported unpinned-uses

Minor caution · high confidence

Standard Python setup action referenced by version tag instead of a locked hash. Minor hardening gap only.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The fast job uses actions/setup-python@v5 pinned to a major version tag. First-party GitHub action with no malicious flow; minor integrity hardening gap.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/setup-python to a full commit SHA.

Scanner
zizmor 1.28.0
Rule
unpinned-uses
File role
tooling
Source
.github/workflows/ci.yml:25

zizmor reported unpinned-uses

Minor caution · high confidence

Same Python setup action by version tag. Minor hardening gap only.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The pydantic1 job uses actions/setup-python@v5 pinned to a major version tag. Same minor hardening gap; no malicious flow.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/setup-python to a full commit SHA.

Scanner
zizmor 1.28.0
Rule
unpinned-uses
File role
tooling
Source
.github/workflows/ci.yml:57

zizmor reported unpinned-uses

Minor caution · high confidence

The CI workflow uses a standard GitHub-provided helper by its version label instead of locking it to an exact snapshot. This is normal practice and not a sign of anything malicious, though locking to an exact snapshot would be slightly safer.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The flagged line references a first-party GitHub action by major-version tag rather than an immutable commit SHA. This is the conventional usage pattern and carries only the standard supply-chain risk that a tag could be moved by the action maintainer. No secrets, tokens, or user-controlled inputs are passed in a way that amplifies this risk, and the action is a well-known official GitHub action used for Python setup in CI.

Impact: low · Exploitability: unlikely

Developer action: Consider pinning first-party actions to a commit SHA for stronger supply-chain integrity, but no urgent change is required.

Scanner
zizmor 1.28.0
Rule
unpinned-uses
File role
tooling
Source
.github/workflows/ci.yml:88

zizmor reported unpinned-uses

Minor caution · high confidence

Same checkout action by version tag. Minor hardening gap only.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The browser job uses actions/checkout@v4 pinned to a major version tag. Same minor hardening gap as other checkout references; no malicious flow.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/checkout to a full commit SHA.

Scanner
zizmor 1.28.0
Rule
unpinned-uses
File role
tooling
Source
.github/workflows/ci.yml:87
Expected scanner matches (3)

zizmor reported artipacked

Expected behavior · high confidence

The scanner flagged a theoretical credential-leakage risk, but this workflow never saves artifacts that could carry credentials, so there is no actual risk.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: The artipacked rule fires on checkout usage, but this workflow has no upload-artifact steps and permissions are limited to contents: read. There is no artifact persistence path for credentials, so the finding does not correspond to a real data flow.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
zizmor 1.28.0
Rule
artipacked
File role
tooling
Source
.github/workflows/ci.yml:24

zizmor reported artipacked

Expected behavior · high confidence

No artifact uploads in this job, so no credential leakage path exists.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: Artipacked finding on the pydantic1 job checkout. No artifact upload steps exist in this job and permissions are contents: read, so no credential persistence path is present.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
zizmor 1.28.0
Rule
artipacked
File role
tooling
Source
.github/workflows/ci.yml:56

zizmor reported artipacked

Expected behavior · high confidence

No artifact uploads in this job, so no credential leakage path exists.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: Artipacked finding on the browser job checkout. No artifact upload steps exist in this job and permissions are contents: read, so no credential persistence path is present.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner
zizmor 1.28.0
Rule
artipacked
File role
tooling
Source
.github/workflows/ci.yml:87

Related contextual observations

Other workflow actions are also tag-pinned

low risk · high confidence

Other helper steps in the same workflow follow the same normal version-label pattern. No additional risk beyond the already-noted minor hardening suggestion.

Technical assessment

The surrounding context shows additional first-party actions referenced by major-version tags. The same minor supply-chain consideration applies to each; none indicate malicious behavior or secret exposure.

Impact: low · Exploitability: unlikely

Developer action: Apply SHA pinning consistently across all workflow action references if adopting that hardening practice.

Sources:

Coverage and limitations

Tools

Limitations

Technical scan identity