Image de couverture de livre

Granite: Granular Runtime Enforcement for GitHub Actions Permissions

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Moazen, Mojtaba, Ahmadian, Amir. M, Balliu, Musard
Format:	Preprint
Publié:	2025
Sujets:	Cryptography and Security
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

NodeShield: Runtime Enforcement of Security-Enhanced SBOMs for Node.js
par: Cornelissen, Eric, et autres
Publié: (2025)

Disjunctive Policies for Database-Backed Programs
par: Ahmadian, Amir M., et autres
Publié: (2023)

GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes
par: Cornelissen, Eric, et autres
Publié: (2024)

Securing P4 Programs by Information Flow Control
par: Alshnakat, Anoud, et autres
Publié: (2025)

Unpacking Security Scanners for GitHub Actions Workflows
par: Fares, Madjda, et autres
Publié: (2026)

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions
par: Wang, Shenao, et autres
Publié: (2026)

Sharing without Showing: Secure Cloud Analytics with Trusted Execution Environments
par: Birgersson, Marcus, et autres
Publié: (2024)

Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
par: Fu, Yujia, et autres
Publié: (2023)

On the effectiveness of Large Language Models for GitHub Workflows
par: Zhang, Xinyu, et autres
Publié: (2024)

Is GitHub's Copilot as Bad as Humans at Introducing Vulnerabilities in Code?
par: Asare, Owura, et autres
Publié: (2022)

Characterizing and Modeling the GitHub Security Advisories Review Pipeline
par: Segal, Claudio, et autres
Publié: (2026)

Exploring User Privacy Awareness on GitHub: An Empirical Study
par: Alfieri, Costanza, et autres
Publié: (2024)

Can Highlighting Help GitHub Maintainers Track Security Fixes?
par: Liu, Xueqing, et autres
Publié: (2024)

Eradicating the Unseen: Detecting, Exploiting, and Remediating a Path Traversal Vulnerability across GitHub
par: Akhoundali, Jafar, et autres
Publié: (2025)

Unveiling A Hidden Risk: Exposing Educational but Malicious Repositories in GitHub
par: Masud, Md Rayhanul, et autres
Publié: (2024)

Security Vulnerabilities in AI-Generated Code: A Large-Scale Analysis of Public GitHub Repositories
par: Schreiber, Maximilian, et autres
Publié: (2025)

On the Prevalence and Usage of Commit Signing on GitHub: A Longitudinal and Cross-Domain Study
par: Sharma, Anupam, et autres
Publié: (2025)

Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
par: Siddiq, Mohammed Latif, et autres
Publié: (2026)

Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows
par: Ruan, Bonan, et autres
Publié: (2026)

IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports
par: Rahman, Md Nafiu, et autres
Publié: (2026)

LLM-Enabled Open-Source Systems in the Wild: An Empirical Study of Vulnerabilities in GitHub Security Advisories
par: Shifat, Fariha Tanjim, et autres
Publié: (2026)

Bugdar: AI-Augmented Secure Code Review for GitHub Pull Requests
par: Naulty, John, et autres
Publié: (2025)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
par: He, Hao, et autres
Publié: (2024)

Enhancing Security of AI-Based Code Synthesis with GitHub Copilot via Cheap and Efficient Prompt-Engineering
par: Res, Jakub, et autres
Publié: (2024)

zkSBOM: Privacy-Preserving SBOM Sharing with Zero-Knowledge Sets
par: Sorger, Tom, et autres
Publié: (2026)

Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues
par: Cipollone, Daniele, et autres
Publié: (2025)

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages
par: Ghosh, Rajdeep, et autres
Publié: (2025)

Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot
par: Ferreyra, Nicolás E. Díaz, et autres
Publié: (2026)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
par: Cesarano, Carmine, et autres
Publié: (2025)

Formal Verification of Permission Voucher
par: Reaz, Khan, et autres
Publié: (2024)

Autonomous Action Runtime Management(AARM):A System Specification for Securing AI-Driven Actions at Runtime
par: Errico, Herman
Publié: (2026)

From Permissioned to Proof-of-Stake Consensus
par: Komatovic, Jovan, et autres
Publié: (2025)

Demystifying Progressive Web Application Permission Systems
par: Wang, Mengxiao, et autres
Publié: (2025)

The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck
par: Fan, Linfeng, et autres
Publié: (2026)

Cryptographic Runtime Governance for Autonomous AI Systems: The Aegis Architecture for Verifiable Policy Enforcement
par: Mazzocchetti, Adam Massimo
Publié: (2026)

AIRGuard: Guarding Agent Actions with Runtime Authority Control
par: Qin, Suliu, et autres
Publié: (2026)

Beyond the Scope: Security Testing of Permission Management in Team Workspace
par: Wan, Liuhuo, et autres
Publié: (2025)

Privacy-Preserving On-chain Permissioning for KYC-Compliant Decentralized Applications
par: Piper, Fabian, et autres
Publié: (2025)

Privacy as Permissible Operations: An ABAC Framework for Policy-Law Compliance
par: Dhakar, Ajay, et autres
Publié: (2026)

Detecting Malicious Entra OAuth Apps with LLM-Based Permission Risk Scoring
par: Mahara, Ashim
Publié: (2025)