v1.9.1

What's Changed

• feat: exempt docker image:tag by @vamshi-stepsecurity in #2566

Full Changelog: v1.9.0...v1.9.1

v1.9.0

What's Changed

• feat: Implement runner label replacement functionality and add corresponding tests -> prod by @shubham-stepsecurity in #2564

Full Changelog: v1.8.0...v1.9.0

v1.8.0

What's Changed

• feat: Exempt images for Pinning and Maintained Actions support for Composite actions by @vamshi-stepsecurity in #2562

Full Changelog: v1.7.3...v1.8.0

v1.7.3

What's Changed

• Fix: Pin composite actions by @vamshi-stepsecurity in #2556

Full Changelog: v1.7.2...v1.7.3

v1.7.2

What's Changed

• Fix/wild card for actions by @vamshi-stepsecurity in #2553

Full Changelog: v1.7.1...v1.7.2

v1.7.1

What's Changed

• Cherry pick/using secure repo token by @vamshi-stepsecurity in #2548

Full Changelog: v1.7.0...v1.7.1

v1.7.0

What's Changed

• Cherry pick: Pin using action commit map by @vamshi-stepsecurity in #2542

Full Changelog: v1.6.2...v1.7.0

v1.6.2

What's Changed

• fix: handle quote delimiter for pin actions -> prod by @shubham-stepsecurity in #2536

Full Changelog: v1.6.1...v1.6.2

v1.6.1

What's Changed

• Cherry pick action updates by @varunsh-coder in #2529
• fix: handle replaceable GitHub Actions with folder path references by @vamshi-stepsecurity in #2534

Full Changelog: v1.6.0...v1.6.1

v1.6.0

What's Changed

• feat: add logging capability to SecureWorkflow by @varunsh-coder in #2517
• Add support for maintained actions by @vamshi-stepsecurity in #2523
• Add addEmptyTopLevelPermissions parameter for workflow permissions by @varunsh-coder in #2524
• Add skipHardenRunnerForContainers option to exclude container jobs fr… by @varunsh-coder in #2525

Full Changelog: v1.5.3...v1.6.0