Security
Known vulnerabilities
Every dependency of every app, checked against the OSV vulnerability database every week, with the version that fixes each finding.
Loading the latest scan…
By level
By app
Findings
How it works
- Every week: the Security workflow scans the iOS, Android, web app, back office, backend and website dependencies against OSV.
- Every pull request: dependency review blocks new dependencies with known high or critical vulnerabilities; CodeQL checks the code.
- Every push: secret push protection blocks known key formats.
- Fixing: Dependabot opens updates every week, and the
security-auditskill tells agents how to fix a finding.
Found a security problem? Please do not open a public issue: report it privately (see SECURITY.md).