← Back to search

@pagopa/dx-mcpserver

GitHub Actions Scanned 25d ago

An MCP server that supports developers using DX tools.

npm ↗
? Not scanned yet

Versions

0.2.12latest
Jul 28, 2026
0.2.10
Jul 2, 2026
0.2.9
Jun 26, 2026
0.2.8
Jun 18, 2026
0.2.7
Jun 9, 2026
+ show 25 moreshow less
0.2.6
Jun 9, 2026
0.2.5
Jun 4, 2026
0.2.4
May 7, 2026
0.2.3
May 5, 2026
0.2.2
Apr 28, 2026
0.2.1
Apr 20, 2026
0.2.0
Apr 9, 2026
0.1.6
Apr 1, 2026
0.1.5
Mar 23, 2026
0.1.4
Mar 16, 2026
0.1.3
Mar 4, 2026
0.1.2
Feb 5, 2026
0.1.1
Jan 28, 2026
0.0.12
Dec 19, 2025
0.0.11
Dec 15, 2025
0.0.10
Dec 12, 2025
0.0.9
Dec 3, 2025
0.0.8
Dec 2, 2025
0.0.7
Nov 20, 2025
0.0.6
Nov 17, 2025
0.0.5
Nov 11, 2025
0.0.4
Oct 30, 2025
0.0.3
Oct 30, 2025
0.0.2
Oct 16, 2025
0.0.1
Oct 13, 2025

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, open(), os
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 34

high
Hardcoded OAuth client secret in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/plan.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 1032 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
info
OSV.dev API query failed dependency_analyzer · 100%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-e8fea7c/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:40 entropy_analyzer · 70%
medium
Buffer.from base64 in pagopa-dx-e8fea7c/apps/dx-metrics-import/src/lib/importers/workflows.ts:119 entropy_analyzer · 75%
medium
Buffer.from base64 in pagopa-dx-e8fea7c/apps/dx-metrics-import/src/lib/importers/search.ts:107 entropy_analyzer · 75%
medium
Buffer.from base64 in pagopa-dx-e8fea7c/apps/cli/src/adapters/octokit/index.ts:153 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (56) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 410 components sbom_generator · 100%
critical
Database URL with Password found in pagopa-dx-e8fea7c/infra/resources/_modules/metrics_portal/db.tf secret_scanner · 85%
critical
Database URL with Password found in pagopa-dx-e8fea7c/packages/dx-metrics-core/README.md secret_scanner · 85%
critical
GitHub Personal Access Token found in pagopa-dx-e8fea7c/apps/dx-metrics/.env.local secret_scanner · 95%
critical
Database URL with Password found in pagopa-dx-e8fea7c/apps/dx-metrics/.env.local secret_scanner · 85%
critical
Database URL with Password found in pagopa-dx-e8fea7c/apps/dx-metrics-import/README.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%