Skip to content

Commit ca7bcc9

Browse files
author
Dave Bartolomeo
committed
Add change note
1 parent cb7aeea commit ca7bcc9

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
---
2+
category: queryMetadata
3+
---
4+
* The following queries have been removed from the `code-scanning` and `security-extended` suites:
5+
* `actions/if-expression-always-true/critical`
6+
* `actions/if-expression-always-true/high`
7+
* `actions/unnecessary-use-of-advanced-config`
8+
* The following queries have been moved from the `code-scanning` suite to the `security-extended`
9+
suite:
10+
* `actions/unpinned-tag`
11+
* The following queries have been added to the `security-extended` suite:
12+
* `actions/unversioned-immutable-action`
13+
* `actions/envpath-injection/medium`
14+
* `actions/envvar-injection/medium`
15+
* `actions/code-injection/medium`
16+
* `actions/artifact-poisoning/medium`
17+
* `actions/untrusted-checkout/medium`

0 commit comments

Comments
 (0)