We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent cb7aeea commit ca7bcc9Copy full SHA for ca7bcc9
1 file changed
actions/ql/src/change-notes/2025-02-06-curate-suites.md
@@ -0,0 +1,17 @@
1
+---
2
+category: queryMetadata
3
4
+* The following queries have been removed from the `code-scanning` and `security-extended` suites:
5
+ * `actions/if-expression-always-true/critical`
6
+ * `actions/if-expression-always-true/high`
7
+ * `actions/unnecessary-use-of-advanced-config`
8
+* The following queries have been moved from the `code-scanning` suite to the `security-extended`
9
+ suite:
10
+ * `actions/unpinned-tag`
11
+* The following queries have been added to the `security-extended` suite:
12
+ * `actions/unversioned-immutable-action`
13
+ * `actions/envpath-injection/medium`
14
+ * `actions/envvar-injection/medium`
15
+ * `actions/code-injection/medium`
16
+ * `actions/artifact-poisoning/medium`
17
+ * `actions/untrusted-checkout/medium`
0 commit comments