Finished StepSecurity Required Checks

• NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
• NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
• PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
• Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
• Script Injection Check - Checks for script injection vulnerabilities in the PR

---

Approve a check

If you need to approve a check, [please open a ticket with the SOC](https://coveord.atlassian.net/servicedesk/customer/portal/116/group/640/create/1324) Unsure whether the check should be approved? Open a ticket as well

Please include a link to the check.

We can create an exclusion if the call is expected. In the ticket, please specify the expected scope of the call: job, workflow, repository, or the entire org.

Re-run a check

To re-run a check, go to Conversation and add the following comment:

@stepsecurity-app checks re-run

The check should re-run automatically. If it does not, open a ticket with the SOC

Please include a link to the check.

No check should take more than 15 minutes. You can re-run a check if it does.