Imagen de Portada

Granite: Granular Runtime Enforcement for GitHub Actions Permissions

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Moazen, Mojtaba, Ahmadian, Amir. M, Balliu, Musard
Formato:	Preprint
Publicado:	2025
Materias:	Cryptography and Security
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

NodeShield: Runtime Enforcement of Security-Enhanced SBOMs for Node.js
por: Cornelissen, Eric, et al.
Publicado: (2025)

Disjunctive Policies for Database-Backed Programs
por: Ahmadian, Amir M., et al.
Publicado: (2023)

GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes
por: Cornelissen, Eric, et al.
Publicado: (2024)

Securing P4 Programs by Information Flow Control
por: Alshnakat, Anoud, et al.
Publicado: (2025)

Unpacking Security Scanners for GitHub Actions Workflows
por: Fares, Madjda, et al.
Publicado: (2026)

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions
por: Wang, Shenao, et al.
Publicado: (2026)

Sharing without Showing: Secure Cloud Analytics with Trusted Execution Environments
por: Birgersson, Marcus, et al.
Publicado: (2024)

Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
por: Fu, Yujia, et al.
Publicado: (2023)

On the effectiveness of Large Language Models for GitHub Workflows
por: Zhang, Xinyu, et al.
Publicado: (2024)

Is GitHub's Copilot as Bad as Humans at Introducing Vulnerabilities in Code?
por: Asare, Owura, et al.
Publicado: (2022)

Characterizing and Modeling the GitHub Security Advisories Review Pipeline
por: Segal, Claudio, et al.
Publicado: (2026)

Exploring User Privacy Awareness on GitHub: An Empirical Study
por: Alfieri, Costanza, et al.
Publicado: (2024)

Can Highlighting Help GitHub Maintainers Track Security Fixes?
por: Liu, Xueqing, et al.
Publicado: (2024)

Eradicating the Unseen: Detecting, Exploiting, and Remediating a Path Traversal Vulnerability across GitHub
por: Akhoundali, Jafar, et al.
Publicado: (2025)

Unveiling A Hidden Risk: Exposing Educational but Malicious Repositories in GitHub
por: Masud, Md Rayhanul, et al.
Publicado: (2024)

Security Vulnerabilities in AI-Generated Code: A Large-Scale Analysis of Public GitHub Repositories
por: Schreiber, Maximilian, et al.
Publicado: (2025)

On the Prevalence and Usage of Commit Signing on GitHub: A Longitudinal and Cross-Domain Study
por: Sharma, Anupam, et al.
Publicado: (2025)

Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
por: Siddiq, Mohammed Latif, et al.
Publicado: (2026)

Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows
por: Ruan, Bonan, et al.
Publicado: (2026)

IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports
por: Rahman, Md Nafiu, et al.
Publicado: (2026)

LLM-Enabled Open-Source Systems in the Wild: An Empirical Study of Vulnerabilities in GitHub Security Advisories
por: Shifat, Fariha Tanjim, et al.
Publicado: (2026)

Bugdar: AI-Augmented Secure Code Review for GitHub Pull Requests
por: Naulty, John, et al.
Publicado: (2025)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
por: He, Hao, et al.
Publicado: (2024)

Enhancing Security of AI-Based Code Synthesis with GitHub Copilot via Cheap and Efficient Prompt-Engineering
por: Res, Jakub, et al.
Publicado: (2024)

zkSBOM: Privacy-Preserving SBOM Sharing with Zero-Knowledge Sets
por: Sorger, Tom, et al.
Publicado: (2026)

Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues
por: Cipollone, Daniele, et al.
Publicado: (2025)

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages
por: Ghosh, Rajdeep, et al.
Publicado: (2025)

Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot
por: Ferreyra, Nicolás E. Díaz, et al.
Publicado: (2026)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
por: Cesarano, Carmine, et al.
Publicado: (2025)

Formal Verification of Permission Voucher
por: Reaz, Khan, et al.
Publicado: (2024)

Autonomous Action Runtime Management(AARM):A System Specification for Securing AI-Driven Actions at Runtime
por: Errico, Herman
Publicado: (2026)

From Permissioned to Proof-of-Stake Consensus
por: Komatovic, Jovan, et al.
Publicado: (2025)

Demystifying Progressive Web Application Permission Systems
por: Wang, Mengxiao, et al.
Publicado: (2025)

The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck
por: Fan, Linfeng, et al.
Publicado: (2026)

Cryptographic Runtime Governance for Autonomous AI Systems: The Aegis Architecture for Verifiable Policy Enforcement
por: Mazzocchetti, Adam Massimo
Publicado: (2026)

AIRGuard: Guarding Agent Actions with Runtime Authority Control
por: Qin, Suliu, et al.
Publicado: (2026)

Beyond the Scope: Security Testing of Permission Management in Team Workspace
por: Wan, Liuhuo, et al.
Publicado: (2025)

Privacy-Preserving On-chain Permissioning for KYC-Compliant Decentralized Applications
por: Piper, Fabian, et al.
Publicado: (2025)

Privacy as Permissible Operations: An ABAC Framework for Policy-Law Compliance
por: Dhakar, Ajay, et al.
Publicado: (2026)

Detecting Malicious Entra OAuth Apps with LLM-Based Permission Risk Scoring
por: Mahara, Ashim
Publicado: (2025)