Code Security Report: 7 total findings [master]

[mend-for-github-com]

Code Security Report

Scan Metadata

Latest Scan: 2026-04-16 01:36pm
Total Findings: 7 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 48
Detected Programming Languages: 2 (Secrets, Kotlin Mobile)

• Check this box to manually trigger a scan

Note: GitHub may take a few seconds to process actions triggered via checkboxes.
Please wait until the change is visible before continuing.

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Detected
Low	External URL Access	CWE-676	ReposListHeader.kt:175	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/java/com/abhishek/pathak/kotlin/android/githubcompose/ui/feature/repos/composables/ReposListHeader.kt Line 175 in e4f7147 AndroidView(factory = { Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	External URL Access	CWE-676	ReposListHeader.kt:182	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/java/com/abhishek/pathak/kotlin/android/githubcompose/ui/feature/repos/composables/ReposListHeader.kt Line 182 in e4f7147 loadUrl(url) Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	External URL Access	CWE-676	ReposListHeader.kt:202	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/java/com/abhishek/pathak/kotlin/android/githubcompose/ui/feature/repos/composables/ReposListHeader.kt Line 202 in e4f7147 it.loadUrl(url) Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	Application Configuration	CWE-16	AndroidManifest.xml:6	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/AndroidManifest.xml Lines 1 to 6 in e4f7147 <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" > <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" /> <uses-permission android:name="android.permission.INTERNET" /> 1 Data Flow/s detected engine-processor-1385/app/src/main/AndroidManifest.xml Line 6 in e4f7147 <uses-permission android:name="android.permission.INTERNET" /> Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	Application Configuration	CWE-16	AndroidManifest.xml:19	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/AndroidManifest.xml Lines 14 to 19 in e4f7147 android:supportsRtl="true" android:theme="@style/Theme.GithubCompose"> <activity android:name=".ui.feature.main.MainActivity" android:exported="true" 1 Data Flow/s detected engine-processor-1385/app/src/main/AndroidManifest.xml Line 19 in e4f7147 android:exported="true" Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	External URL Access	CWE-676	ReposListHeader.kt:199	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/java/com/abhishek/pathak/kotlin/android/githubcompose/ui/feature/repos/composables/ReposListHeader.kt Line 199 in e4f7147 loadUrl(url) Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	Application Configuration	CWE-16	AndroidManifest.xml:5	1	2026-04-08 06:59am
Vulnerable Code engine-processor-1385/app/src/main/AndroidManifest.xml Lines 1 to 5 in e4f7147 <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" > <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" /> 1 Data Flow/s detected engine-processor-1385/app/src/main/AndroidManifest.xml Line 5 in e4f7147 <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" /> Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.