René's URL Explorer Experiment

Title: Ineligible submissions | GitHub Bug Bounty

Open Graph Title: Ineligible submissions

X Title: Ineligible submissions

Opengraph URL: https://bounty.github.com/ineligible.html

X: @githubsecurity

Generator: Jekyll v4.3.1

direct link

Domain: bounty.github.com

Hey, it has json ld scripts:

{"@context":"https://schema.org","@type":"WebPage","headline":"Ineligible submissions","publisher":{"@type":"Organization","logo":{"@type":"ImageObject","url":"https://bounty.github.com/images/noircat@2x.png"}},"url":"https://bounty.github.com/ineligible.html"}

None	IE=edge
og:locale	en_US
og:site_name	GitHub Bug Bounty
og:type	website
twitter:card	summary

Links:

GitHub Security	https://bounty.github.com/
Scope	https://bounty.github.com/scope
Targets	https://bounty.github.com/targets
Rules	https://bounty.github.com/rules
Rewards	https://bounty.github.com/rewards
Ineligible Submissions	https://bounty.github.com/ineligible
About	https://bounty.github.com/about
Blog	https://github.blog/tag/bug-bounty/
FAQs	https://bounty.github.com/faq
Submit a vulnerability	https://hackerone.com/github
OAuth client ID and secrets are publicly available in desktop and mobile apps	https://bounty.github.com/ineligible#oauth_client_id_and_secrets_are_publicly_available_in_desktop_and_mobile_apps
Use of known-vulnerable software	https://bounty.github.com/ineligible#use_of_knownvulnerable_software
Vulnerability in upstream dependencies	https://bounty.github.com/ineligible#vulnerability_in_upstream_dependencies
Clickjacking a static site	https://bounty.github.com/ineligible#clickjacking_a_static_site
Local Access	https://bounty.github.com/ineligible#local_access
Network Denial of Service	https://bounty.github.com/ineligible#network_denial_of_service
Typosquatting	https://bounty.github.com/ineligible#typosquatting
Vulnerabilities identified in Open Source Repositories	https://bounty.github.com/ineligible#vulnerabilities_identified_in_open_source_repositories
Arbitrary code execution in dependency update jobs	https://bounty.github.com/ineligible#arbitrary_code_execution_in_dependency_update_jobs
Secret gists are accessible via URL without authentication	https://bounty.github.com/ineligible#secret_gists_are_accessible_via_url_without_authentication
Code Execution in Actions	https://bounty.github.com/ineligible#code_execution_in_actions
Bypassing build log secret redaction	https://bounty.github.com/ineligible#bypassing_build_log_secret_redaction
General abuse or exhaustion of resources	https://bounty.github.com/ineligible#general_abuse_or_exhaustion_of_resources
Availability of resources inside a workflow run	https://bounty.github.com/ineligible#availability_of_resources_inside_a_workflow_run
Access to build artifacts without user session	https://bounty.github.com/ineligible#access_to_build_artifacts_without_user_session
Resource consumption within a user's own codespace	https://bounty.github.com/ineligible#resource_consumption_within_a_users_own_codespace
Access to metadata services from within a codespace	https://bounty.github.com/ineligible#access_to_metadata_services_from_within_a_codespace
Vulnerabilities in third-party software within a codespace	https://bounty.github.com/ineligible#vulnerabilities_in_thirdparty_software_within_a_codespace
Privileged access within a user's own codespace	https://bounty.github.com/ineligible#privileged_access_within_a_users_own_codespace
Vulnerabilities in GitHub Copilot Chat extension and Inline Suggestions in Visual Studio Code	https://bounty.github.com/ineligible#vulnerabilities_in_github_copilot_chat_extension_and_inline_suggestions_in_visual_studio_code
Prompt Injections	https://bounty.github.com/ineligible#prompt_injections
The security of code suggested by Copilot	https://bounty.github.com/ineligible#the_security_of_code_suggested_by_copilot
Tokens suggested by Copilot	https://bounty.github.com/ineligible#tokens_suggested_by_copilot
Prototype features	https://bounty.github.com/ineligible#prototype_features
Off topic conversation	https://bounty.github.com/ineligible#off_topic_conversation
Credentials which have been detected by GitHub's Token Scanning feature	https://bounty.github.com/ineligible#credentials_which_have_been_detected_by_githubs_token_scanning_feature
Credentials on GitHub	https://bounty.github.com/ineligible#credentials_on_github
Vulnerabilities caused by lack of subdomain isolation	https://bounty.github.com/ineligible#vulnerabilities_caused_by_lack_of_subdomain_isolation
Escalation to the root user via sudo	https://bounty.github.com/ineligible#escalation_to_the_root_user_via_sudo
Access to sensitive configuration information with local access	https://bounty.github.com/ineligible#access_to_sensitive_configuration_information_with_local_access
Bypassing source code de-obfuscation	https://bounty.github.com/ineligible#bypassing_source_code_deobfuscation
On-screen data is not hidden when backgrounding the app	https://bounty.github.com/ineligible#onscreen_data_is_not_hidden_when_backgrounding_the_app
No jailbreak detection	https://bounty.github.com/ineligible#no_jailbreak_detection
Vulnerabilities in out-of-scope subdomains	https://bounty.github.com/ineligible#vulnerabilities_in_outofscope_subdomains
Vulnerabilities in GitHub Pages hosted content	https://bounty.github.com/ineligible#vulnerabilities_in_github_pages_hosted_content
Subdomain Takeover	https://bounty.github.com/ineligible#subdomain_takeover
Including HTML in Markdown content	https://bounty.github.com/ineligible#including_html_in_markdown_content
Leaking email addresses via .patch links	https://bounty.github.com/ineligible#leaking_email_addresses_via_patch_links
Phishing using Unicode homoglyphs, RTLO, or non-printable characters	https://bounty.github.com/ineligible#phishing_using_unicode_homoglyphs_rtlo_or_nonprintable_characters
Email verification policy	https://bounty.github.com/ineligible#email_verification_policy
Email Invitations	https://bounty.github.com/ineligible#email_invitations
Impersonating a user through git email address	https://bounty.github.com/ineligible#impersonating_a_user_through_git_email_address
DMARC, SPF and DKIM email policy	https://bounty.github.com/ineligible#dmarc_spf_and_dkim_email_policy
Bypassing country restrictions for SMS two-factor authentication	https://bounty.github.com/ineligible#bypassing_country_restrictions_for_sms_twofactor_authentication
Vulnerabilities in repositories hosted on GitHub	https://bounty.github.com/ineligible#vulnerabilities_in_repositories_hosted_on_github
Host header injection	https://bounty.github.com/ineligible#host_header_injection
Timing attacks which reveal a private repository or user	https://bounty.github.com/ineligible#timing_attacks_which_reveal_a_private_repository_or_user
2FA does not invalidate existing sessions	https://bounty.github.com/ineligible#2fa_does_not_invalidate_existing_sessions
Enabling 2FA without a verified email	https://bounty.github.com/ineligible#enabling_2fa_without_a_verified_email
Vulnerabilities caused by out-dated browsers	https://bounty.github.com/ineligible#vulnerabilities_caused_by_outdated_browsers
Camo image proxy	https://bounty.github.com/ineligible#camo_image_proxy
Lack of Sudo mode	https://bounty.github.com/ineligible#lack_of_sudo_mode
Community and safety bypasses that do not affect privacy	https://bounty.github.com/ineligible#community_and_safety_bypasses_that_do_not_affect_privacy
Activity in archived repos	https://bounty.github.com/ineligible#activity_in_archived_repos
Accessing certain disabled functionality	https://bounty.github.com/ineligible#accessing_certain_disabled_functionality
Lack of rate limiting	https://bounty.github.com/ineligible#lack_of_rate_limiting
Email and Username Enumeration	https://bounty.github.com/ineligible#email_and_username_enumeration
OAuth App Redirect	https://bounty.github.com/ineligible#oauth_app_redirect
Lack of Secret Scanning Alert	https://bounty.github.com/ineligible#lack_of_secret_scanning_alert
Vulnerabilities in out-of-scope subdomains	https://bounty.github.com/ineligible#vulnerabilities_in_outofscope_subdomains
Social engineering	https://bounty.github.com/ineligible#social_engineering
Local access	https://bounty.github.com/ineligible#local_access
Arbitrary code execution in commands that modify the package tree	https://bounty.github.com/ineligible#arbitrary_code_execution_in_commands_that_modify_the_package_tree
Upstream dependencies	https://bounty.github.com/ineligible#upstream_dependencies
Vulnerabilities in packages that are hosted on the registry	https://bounty.github.com/ineligible#vulnerabilities_in_packages_that_are_hosted_on_the_registry
Malicious packages	https://bounty.github.com/ineligible#malicious_packages
Infrastructure vulnerabilities	https://bounty.github.com/ineligible#infrastructure_vulnerabilities
Timing attacks that reveal a private package	https://bounty.github.com/ineligible#timing_attacks_that_reveal_a_private_package
GitHub Mobile	https://bounty.github.com/targets/github-for-mobile
GitHub CLI	https://bounty.github.com/targets/github-cli
GitHub Pages	https://pages.github.com/
rules	https://bounty.github.com/rules
support team	https://support.github.com/request
SECURITY.md	https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository
intentional feature	https://help.github.com/articles/about-gists/#secret-gists
encrypted secrets	https://help.github.com/en/actions/automating-your-workflow-with-github-actions/creating-and-using-encrypted-secrets
dev containers	https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers
GitHub Copilot Chat extension	https://code.visualstudio.com/docs/copilot/chat/getting-started-chat
Inline Suggestions from GitHub Copilot	https://code.visualstudio.com/docs/copilot/ai-powered-suggestions
Bug Bounty Program	https://www.microsoft.com/en-us/msrc/bounty
Our blog has more information about our approach to securing code suggestions	https://github.blog/2023-02-14-github-copilot-now-has-a-better-ai-model-and-new-capabilities/
Token Scanning	https://help.github.com/articles/about-token-scanning/
GitHub Advanced Security Scanning protections	https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning?learn=secret_scanning&learnProduct=code-security
this REST API	https://docs.github.com/en/rest/credentials/revoke?apiVersion=2022-11-28#revoke-a-list-of-credentials
subdomain isolation	https://docs.github.com/en/enterprise-server@3.16/admin/configuring-settings/hardening-security-for-your-enterprise/enabling-subdomain-isolation?learn=improve_security_of_your_instance&learnProduct=admin
scope	https://bounty.github.com/scope
Support	https://support.github.com/request
GitHub Flavored Markdown	https://help.github.com/articles/about-writing-and-formatting-on-github/
About Commit Email Addresses	https://help.github.com/en/articles/setting-your-commit-email-address#about-commit-email-addresses
support portal	https://github.com/contact/report-abuse
support team	https://github.com/contact/report-abuse
let us know by contacting our support team	https://github.com/contact
two-factor authentication method	https://help.github.com/articles/configuring-two-factor-authentication/
secret team	https://help.github.com/articles/about-teams/
Sudo mode	https://help.github.com/en/github/authenticating-to-github/sudo-mode
safety	https://help.github.com/en/github/building-a-strong-community/maintaining-your-safety-on-github
supported secret scanning patterns	https://docs.github.com/en/code-security/secret-scanning/introduction/supported-secret-scanning-patterns
create custom patterns for secret scanning	https://docs.github.com/en/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns/defining-custom-patterns-for-secret-scanning
scope	https://bounty.github.com/scope
you can set the --ignore-scripts flag	https://docs.npmjs.com/cli/using-npm/config#ignore-scripts
As stated in the npm documentation	https://docs.npmjs.com/cli/using-npm/config#ignore-scripts
contact support	https://support.github.com/request
	https://bounty.github.com/
Terms	https://github.com/site/terms
Privacy	https://github.com/site/privacy
Security	https://github.com/security
Follow us on X	https://x.com/GitHubSecurity

Viewport: width=device-width, initial-scale=1

URLs of crawlers that visited me.