Is Bridge For Git Explorer safe?

Findings

Requires Additional Extensions

Flags items that require one or more other extensions to be installed in order to function. While extension dependencies are a standard software practice, they result in additional extensions being present in the environment.

low

All findings are available for Enterprise users

Code analysis

AI-powered analysis of the extension's source code for security insights and risk assessment.

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

CODE INSIGHTS ARE AVAILABLE FOR ENTERPRISE USERS

API Calls

API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

API CALLS ARE AVAILABLE FOR ENTERPRISE USERS

Secrets

Any encoded/decoded secrets we managed to find in the source code, git repository, or related files

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

SECRETS ARE AVAILABLE FOR ENTERPRISE USERS

Vulnerabilities

Known vulnerabilities and security issues detected in the extension's dependencies and code.

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

VULNERABILITIES ARE AVAILABLE FOR ENTERPRISE USERS

External communication

Any identifiers we detected that may indicate external communication from the item's code

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

EXTERNAL COMMUNICATIONS ARE AVAILABLE FOR ENTERPRISE USERS

Dependencies

Dependencies and third-party libraries used by the extension, including version information and license details.

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

DEPENDENCIES ARE AVAILABLE FOR ENTERPRISE USERS

Licenses & Compliance

Compliance

Compliance status and certifications for the extension and its publisher

Broadcom

Broadcom demonstrates SOC2 compliance through independent third-party examination reports that detail its compliance controls. While Broadcom is SOC2 certified, there is no evidence of a parent company mentioned that would have its own compliance status.

Compliant

Broadcom

Broadcom is compliant with HIPAA regulations, specifically designed for covered entities and their business associates to utilize their services in compliance with HIPAA. However, no information was found regarding a parent company being HIPAA compliant.

Compliant

Broadcom

Broadcom is compliant with ISO27001, as they have aligned their Cloud Services Information Security Management System (ISMS) to this standard. However, there is no evidence found indicating that the parent company, Broadcom Inc., holds ISO27001 certification.

Compliant

Licenses

No license text available...