Commit history

1. Commits on Oct 7, 2026

   • Add `NODE_ENV` as safe environment variable

     mbg

     committed
     75ea4cbView commit details

     Copy full SHA for 75ea4cb

     View code at this pointBrowse repository at this point
2. Commits on May 18, 2026

   • Default setup env vars: Restrict results to `src`

     henrymercer

     committed
     6f8805eView commit details

     Copy full SHA for 6f8805e

     View code at this pointBrowse repository at this point
3. Commits on Dec 19, 2024

   • Use `@actions/io` to locate binaries

     henrymercer

     committed
     b58f447View commit details

     Copy full SHA for b58f447

     View code at this pointBrowse repository at this point
4. Commits on Jan 24, 2024

   • Internal queries: Replace deprecated predicates

     henrymercer

     committed
     a2619f6View commit details

     Copy full SHA for a2619f6

     View code at this pointBrowse repository at this point
5. Commits on Sep 20, 2023

   • Add `RUNNER_ENVIRONMENT` to the list of known default setup variables

     redsun82

     committed
     765807bView commit details

     Copy full SHA for 765807b

     View code at this pointBrowse repository at this point
6. Commits on Aug 7, 2023

   • Ignore test files in env vars query

     henrymercer

     committed
     97ce1b0View commit details

     Copy full SHA for 97ce1b0

     View code at this pointBrowse repository at this point

   • Add `ImageVersion` to safe env vars for default setup

     henrymercer

     committed
     ba5812eView commit details

     Copy full SHA for ba5812e

     View code at this pointBrowse repository at this point
7. Commits on May 31, 2023

   • Address review comments

     henrymercer

     committed
     9632771View commit details

     Copy full SHA for 9632771

     View code at this pointBrowse repository at this point
8. Commits on May 30, 2023

   • Ignore internal Actions

     henrymercer

     committed
     d427c89View commit details

     Copy full SHA for d427c89

     View code at this pointBrowse repository at this point

   • Fix deprecation warnings

     henrymercer

     committed
     125ff55View commit details

     Copy full SHA for 125ff55

     View code at this pointBrowse repository at this point

   • Only flag up the deepest properties

     henrymercer

     committed
     86ead5eView commit details

     Copy full SHA for 86ead5e

     View code at this pointBrowse repository at this point
9. Commits on May 16, 2023

   • Downgrade query severity to warning

     henrymercer

     committed
     eac5e24View commit details

     Copy full SHA for eac5e24

     View code at this pointBrowse repository at this point
10. Commits on May 12, 2023

    • Add query to find context variables that may not work with default setup

      henrymercer

      committed
      8065746View commit details

      Copy full SHA for 8065746

      View code at this pointBrowse repository at this point

    • Add query to identify env vars that may not work with default setup

      henrymercer

      committed
      abb267dView commit details

      Copy full SHA for abb267d

      View code at this pointBrowse repository at this point
11. Commits on May 11, 2023

    • Use new packaging mechanism for internal queries

      henrymercer

      committed
      9953504View commit details

      Copy full SHA for 9953504

      View code at this pointBrowse repository at this point
12. Commits on Aug 24, 2022

    • Remove unguarded Actions library query

      Show description for 182342c
      henrymercer

      committed
      182342cView commit details

      Copy full SHA for 182342c

      View code at this pointBrowse repository at this point
13. Commits on Oct 28, 2021

    • Add RAM and threads options to init action

      cklin

      committed
      70b730eView commit details

      Copy full SHA for 70b730e

      View code at this pointBrowse repository at this point
14. Commits on Jun 2, 2021

    • Update unguarded-action-lib.ql

      robertbrignull

      authored
      61b5618View commit details

      Copy full SHA for 61b5618

      View code at this pointBrowse repository at this point
15. Commits on May 31, 2021

    • Use the version from package.json in the runner

      Show description for 4164096
      aeisenberg

      committed
      4164096View commit details

      Copy full SHA for 4164096

      View code at this pointBrowse repository at this point
16. Commits on Apr 23, 2021

    • make query more robust

      robertbrignull

      committed
      8207018View commit details

      Copy full SHA for 8207018

      View code at this pointBrowse repository at this point
17. Commits on Apr 22, 2021

    • Introduce our own toolcache implementation for use by the runnner

      robertbrignull

      committed
      8c91ba8View commit details

      Copy full SHA for 8c91ba8

      View code at this pointBrowse repository at this point
18. Commits on Mar 16, 2021

    • call setupActionsVars in the tests too

      robertbrignull

      committed
      378f30fView commit details

      Copy full SHA for 378f30f

      View code at this pointBrowse repository at this point

    • Make unguarded-action-lib better at ignoring uses of toolcache

      robertbrignull

      committed
      d698cb3View commit details

      Copy full SHA for d698cb3

      View code at this pointBrowse repository at this point
19. Commits on Nov 20, 2020

    • Add a query to detect binary planting vulnerabilities.

      chrisgavin

      committed
      b03b9feView commit details

      Copy full SHA for b03b9fe

      View code at this pointBrowse repository at this point
20. Commits on Nov 9, 2020

    • fix: small typo in import-action-entrypoint.ql

      0xflotus

      authored
      1870040View commit details

      Copy full SHA for 1870040

      View code at this pointBrowse repository at this point
21. Commits on Sep 16, 2020

    • add explanation to query

      robertbrignull

      committed
      090a701View commit details

      Copy full SHA for 090a701

      View code at this pointBrowse repository at this point
22. Commits on Sep 15, 2020

    • Add queries

      robertbrignull

      committed
      d88fa5cView commit details

      Copy full SHA for d88fa5c

      View code at this pointBrowse repository at this point
23. Commits on Sep 1, 2020

    • whitelist @actions/exec/lib/toolrunner

      robertbrignull

      committed
      b4d142eView commit details

      Copy full SHA for b4d142e

      View code at this pointBrowse repository at this point
24. Commits on Aug 26, 2020

    • Convert rest of the actions

      robertbrignull

      committed
      217483dView commit details

      Copy full SHA for 217483d

      View code at this pointBrowse repository at this point
25. Commits on Aug 25, 2020

    • rename CLI to runner

      robertbrignull

      committed
      09677daView commit details

      Copy full SHA for 09677da

      View code at this pointBrowse repository at this point
26. Commits on Aug 17, 2020

    • add query to detect use of actions libs

      robertbrignull

      committed
      f92a680View commit details

      Copy full SHA for f92a680

      View code at this pointBrowse repository at this point
27. Commits on Jul 16, 2020

    • fix undeclared action inputs

      robertbrignull

      committed
      c7c1aa8View commit details

      Copy full SHA for c7c1aa8

      View code at this pointBrowse repository at this point
28. Commits on May 4, 2020

    • Make use of getContainer

      robertbrignull

      committed
      dcd81b5View commit details

      Copy full SHA for dcd81b5

      View code at this pointBrowse repository at this point

    • Create undeclared-action-input.ql

      robertbrignull

      committed
      d90fca3View commit details

      Copy full SHA for d90fca3

      View code at this pointBrowse repository at this point
29. Commits on Apr 28, 2020

    • Initial commit (from f5274cbdce4ae7c9e4b937dcdf95ac70ae436d5f)

      anaarmas

      committed
      28ccc3dView commit details

      Copy full SHA for 28ccc3d

      View code at this pointBrowse repository at this point
30. Loading