Security scanner false positives

A single rule produced 59 of 61 medium findings before its author read GitHub's docs

A cybersecurity undergraduate's taint scanner for GitHub Actions returned 61 medium-severity findings across 67 repositories. Of those, 59 came from one rule he then found was wrong about how the platform works.