Commits

Breadcrumbs

History for

oncodeql-cli/v2.25.5

User selector

All users

All time

Commit History

Commits on May 18, 2026

• Merge pull request #21692 from github/copilot/update-codeql-query-for-composite-actions

  Show description for 8a199f9
  oscarsj

  authored
  8a199f9

  Copy full SHA for 8a199f9

Commits on May 6, 2026

• Merge pull request #21715 from knewbury01/knewbury01/adjust-actions-queries-untrusted-checkout

  Show description for e6f587e
  owen-mc

  authored
  e6f587e

  Copy full SHA for e6f587e

Commits on May 4, 2026

• Undo larger change in this PR

  knewbury01

  committed
  f9f1349

  Copy full SHA for f9f1349

Commits on Apr 30, 2026

• Update help files CWE-829/UntrustedCheckoutX

  knewbury01

  committed
  4fd0222

  Copy full SHA for 4fd0222

Commits on Apr 20, 2026

• Update UnpinnedActionsTag query metadata scope

  Show description for b204603
  

  Copilot

  and

  oscarsj

  authored
  b204603

  Copy full SHA for b204603

Commits on Apr 15, 2026

• Improve formatting helpfiles

  knewbury01

  committed
  ed4e2bc

  Copy full SHA for ed4e2bc

• Revert accidental change

  knewbury01

  committed
  a342efc

  Copy full SHA for a342efc

• Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries

  knewbury01

  committed
  1233d81

  Copy full SHA for 1233d81

Commits on Apr 10, 2026

• Merge pull request #21636 from jketema/actions-perm

  Show description for 888d392
  jketema

  authored
  888d392

  Copy full SHA for 888d392

• Extend unpinned-tag query to scan composite action metadata

  Show description for ec12035
  

  Copilot

  and

  oscarsj

  authored
  ec12035

  Copy full SHA for ec12035

Commits on Apr 8, 2026

• Change alert location CWE-829/ArtifactPoisoning queries

  knewbury01

  committed
  7b7411f

  Copy full SHA for 7b7411f

Commits on Apr 2, 2026

• Adjust alert messages actions CWE-829

  knewbury01

  committed
  4171465

  Copy full SHA for 4171465

• Adjust alert messages CWE-829/ArtifactPoisoning[Critical|Medium]

  knewbury01

  committed
  e69e30a

  Copy full SHA for e69e30a

• Actions: Correctly check permissions in `actions/missing-workflow-permissions`

  jketema

  committed
  74e6d34

  Copy full SHA for 74e6d34

Commits on Dec 5, 2025

• Actions: note imprecision of MissingActionsPermissions.ql

  Show description for 02caa09
  smowton

  authored
  02caa09

  Copy full SHA for 02caa09

Commits on Dec 4, 2025

• Make predicates containing query logic more self-contained

  owen-mc

  committed
  fb841ea

  Copy full SHA for fb841ea

• Fix filtering of code injection alerts between medium and critical

  owen-mc

  committed
  f6bdb3a

  Copy full SHA for f6bdb3a

Commits on Sep 5, 2025

• Remove non-breaking spaces from code

  aibaars

  committed
  5d3ec35

  Copy full SHA for 5d3ec35

Commits on Aug 15, 2025

• [DIFF-INFORMED] Actions: EnvVarInjection

  Show description for 126d24a
  d10c

  committed
  126d24a

  Copy full SHA for 126d24a

• [DIFF-INFORMED] Actions: EnvPathInjection

  Show description for f1445eb
  d10c

  committed
  f1445eb

  Copy full SHA for f1445eb

• [DIFF-INFORMED] Actions: CodeInjection

  Show description for 418e4b4
  d10c

  committed
  418e4b4

  Copy full SHA for 418e4b4

• [DIFF-INFORMED] Actions: ArtifactPoisoning

  Show description for bbda290
  d10c

  committed
  bbda290

  Copy full SHA for bbda290

Commits on Aug 11, 2025

• Actions: clarify doc for untrusted checkout

  p-

  committed
  98d312f

  Copy full SHA for 98d312f

Commits on Jun 26, 2025

• Reformat references

  owen-mc

  committed
  2ed451c

  Copy full SHA for 2ed451c

• Add full stop at the end of each reference

  owen-mc

  committed
  10bb888

  Copy full SHA for 10bb888

• Add "Correct Usage" and "Incorrect Usage" headings

  owen-mc

  committed
  9f0f40d

  Copy full SHA for 9f0f40d

• Fix format of markdown query help files

  owen-mc

  committed
  9521994

  Copy full SHA for 9521994

Commits on Apr 14, 2025

• Actions: Add security-severity to excessive secrets exposure query

  Show description for 6eb060f
  adityasharad

  committed
  6eb060f

  Copy full SHA for 6eb060f

• Actions: Update description of missing permissions query

  adityasharad

  committed
  93fbb9f

  Copy full SHA for 93fbb9f

• Docs: Minor fixes for Actions query help

  adityasharad

  committed
  eeb938a

  Copy full SHA for eeb938a

Commits on Apr 2, 2025

• Merge pull request #19166 from yoff/actions/add-actions-permissions-MaD-model

  Show description for d31896b
  adityasharad

  authored
  d31896b

  Copy full SHA for d31896b

Commits on Apr 1, 2025

• actions: simplify using existing `UsesStep`

  yoff

  committed
  6fd8aba

  Copy full SHA for 6fd8aba

• Update UntrustedCheckoutCritical.ql

  marcogario

  authored
  d33ce42

  Copy full SHA for d33ce42

• actions: fix typo

  yoff

  committed
  3cdd641

  Copy full SHA for 3cdd641

• Apply suggestions from code review

  Show description for 1ec3e87
  

  yoff

  and

  adityasharad

  authored
  1ec3e87

  Copy full SHA for 1ec3e87