Commits

Breadcrumbs

History for

onpython/class-instance

User selector

All users

All time

Commit History

Commits on May 21, 2026

• Merge branch 'main' into knewbury01/adjust-actions-queries-untrusted-checkout-second-iteration

  knewbury01

  authored
  5503140

  Copy full SHA for 5503140

• Fix merge conflicts

  knewbury01

  committed
  a094a8e

  Copy full SHA for a094a8e

• Merge pull request #21800 from knewbury01/knewbury01/adjust-actions-queries-untrusted-checkout-critical-alert

  Show description for 2280955
  owen-mc

  authored
  2280955

  Copy full SHA for 2280955

Commits on May 18, 2026

• Merge pull request #21838 from github/copilot/widen-regex-for-pinned-actions

  Show description for ad69cfb
  owen-mc

  authored
  ad69cfb

  Copy full SHA for ad69cfb

• Merge pull request #21692 from github/copilot/update-codeql-query-for-composite-actions

  Show description for 8a199f9
  oscarsj

  authored
  8a199f9

  Copy full SHA for 8a199f9

Commits on May 14, 2026

• Fix expected files for changes to alert messages UntrustedCheckoutCritical and UntrustedCheckoutHigh

  knewbury01

  committed
  3eaf04e

  Copy full SHA for 3eaf04e

Commits on May 12, 2026

• Update expected test output

  owen-mc

  committed
  2067113

  Copy full SHA for 2067113

• Widen pinned SHA regex to support SHA-256 (64-char hex) and add tests

  

  Copilot

  authored and

  owen-mc

  committed
  ef1bde7

  Copy full SHA for ef1bde7

Commits on May 5, 2026

• Adjust alert location UntrustedCheckoutCritical

  knewbury01

  committed
  3f44a23

  Copy full SHA for 3f44a23

Commits on Apr 20, 2026

• update and fix tests

  oscarsj

  committed
  e598c56

  Copy full SHA for e598c56

Commits on Apr 10, 2026

• Merge pull request #21636 from jketema/actions-perm

  Show description for 888d392
  jketema

  authored
  888d392

  Copy full SHA for 888d392

• Extend unpinned-tag query to scan composite action metadata

  Show description for ec12035
  

  Copilot

  and

  oscarsj

  authored
  ec12035

  Copy full SHA for ec12035

Commits on Apr 8, 2026

• Change alert location CWE-829/ArtifactPoisoning queries

  knewbury01

  committed
  7b7411f

  Copy full SHA for 7b7411f

Commits on Apr 2, 2026

• Adjust alert messages actions CWE-829

  knewbury01

  committed
  4171465

  Copy full SHA for 4171465

• Actions: Update expected test results

  jketema

  committed
  47409d1

  Copy full SHA for 47409d1

• Actions: Add FP test for `actions/missing-workflow-permissions`

  jketema

  committed
  5866bcc

  Copy full SHA for 5866bcc

Commits on Jan 23, 2026

• Add test

  smowton

  committed
  9018401

  Copy full SHA for 9018401

• Move library tests into subdirectory

  smowton

  committed
  6c2e0f7

  Copy full SHA for 6c2e0f7

Commits on Dec 4, 2025

• Fix filtering of code injection alerts between medium and critical

  owen-mc

  committed
  f6bdb3a

  Copy full SHA for f6bdb3a

• Add test with push and workflow_dispatch triggers

  Show description for e2acd1b
  owen-mc

  committed
  e2acd1b

  Copy full SHA for e2acd1b

Commits on Oct 14, 2025

• Actions: Update `SecretExfiltration` output for typo fix

  henrymercer

  committed
  5310469

  Copy full SHA for 5310469

Commits on Jul 11, 2025

• Add test results.

  AdnaneKhan

  committed
  07598e8

  Copy full SHA for 07598e8

Commits on Jul 10, 2025

• Add extra test suggested by @Napalys

  AdnaneKhan

  committed
  1b794e0

  Copy full SHA for 1b794e0

• Remove unneeded test file.

  AdnaneKhan

  authored
  e40e4c3

  Copy full SHA for e40e4c3

Commits on Jul 9, 2025

• Merge branch 'main' into patch-1

  AdnaneKhan

  authored
  db954d6

  Copy full SHA for db954d6

Commits on Jul 8, 2025

• Add tests and path normalization fix to handle $ expansion

  JarLob

  committed
  9393181

  Copy full SHA for 9393181

• Add change notes and test workflow file.

  AdnaneKhan

  committed
  5d6a5d5

  Copy full SHA for 5d6a5d5

Commits on Jun 9, 2025

• Actions: Add stress test for complex command and string interpolation

  Show description for 2ecbecb
  adityasharad

  committed
  2ecbecb

  Copy full SHA for 2ecbecb

Commits on May 14, 2025

• actions: add some missing permissions

  edwardsneil

  committed
  1a1c9b4

  Copy full SHA for 1a1c9b4

Commits on Apr 1, 2025

• actions: update test expectations

  yoff

  committed
  80ae879

  Copy full SHA for 80ae879

• actions: add test with empty permissions

  yoff

  committed
  bd7c684

  Copy full SHA for bd7c684

Commits on Mar 31, 2025

• ruby: add MaD model for permissions needed by actions

  Show description for e7bb47f
  yoff

  committed
  e7bb47f

  Copy full SHA for e7bb47f

Commits on Mar 20, 2025

• Fix potentially privileged pull request medium query

  JarLob

  committed
  5f63fc2

  Copy full SHA for 5f63fc2

Commits on Mar 6, 2025

• Move UnversionedImmutableAction.ql to experimental

  Show description for 2a0e133
  aeisenberg

  committed
  2a0e133

  Copy full SHA for 2a0e133

Commits on Feb 27, 2025

• Move `immutable-actions-list` pack to `codeql` org

  

  Dave Bartolomeo

  committed
  2dde9ab

  Copy full SHA for 2dde9ab