Commits

Commit history

1. Commits on Oct 6, 2026

   • Address review comments

     owen-mc

     committed
     84ed5d6View commit details

     Copy full SHA for 84ed5d6

     View code at this pointBrowse repository at this point
2. Commits on Oct 5, 2026

   • Actions: ensure CFG callable scopes are unique

     Show description for 755e78b
     

     owen-mc

     and

     Copilot

     committed
     755e78bView commit details

     Copy full SHA for 755e78b

     View code at this pointBrowse repository at this point

   • Actions: model environment expressions at declarations

     Show description for 95efef3
     

     owen-mc

     and

     Copilot

     committed
     95efef3View commit details

     Copy full SHA for 95efef3

     View code at this pointBrowse repository at this point

   • Actions: migrate to shared CFG library

     Show description for e17bfa5
     

     owen-mc

     and

     Copilot

     committed
     e17bfa5View commit details

     Copy full SHA for e17bfa5

     View code at this pointBrowse repository at this point
3. Commits on Sep 18, 2026

   • Merge origin/main into Actions owner distrust branch

     Show description for 8a67fab
     

     redsun82

     and

     Copilot

     committed
     8a67fabView commit details

     Copy full SHA for 8a67fab

     View code at this pointBrowse repository at this point

   • Document Actions inline expectations test API

     Show description for 14f38e6
     

     redsun82

     and

     Copilot

     committed
     14f38e6View commit details

     Copy full SHA for 14f38e6

     View code at this pointBrowse repository at this point

   • Update actions/ql/lib/codeql/actions/test/internal/InlineExpectationsTestImpl.qll

     Show description for bb6b2ce
     

     redsun82

     and

     owen-mc

     authored
     bb6b2ceView commit details

     Copy full SHA for bb6b2ce

     View code at this pointBrowse repository at this point
4. Commits on Sep 11, 2026

   • Actions: address lockfile review feedback

     nodeselector

     committed
     53a7851View commit details

     Copy full SHA for 53a7851

     View code at this pointBrowse repository at this point
5. Commits on Sep 9, 2026

   • Code review suggestions

     

     hvitved

     authored and

     nodeselector

     committed
     ff9bf5dView commit details

     Copy full SHA for ff9bf5d

     View code at this pointBrowse repository at this point

   • Actions lockfiles: match repository casing

     nodeselector

     committed
     a2213aeView commit details

     Copy full SHA for a2213ae

     View code at this pointBrowse repository at this point

   • Actions lockfiles: ignore schema version value

     nodeselector

     committed
     2b7e7abView commit details

     Copy full SHA for 2b7e7ab

     View code at this pointBrowse repository at this point

   • Actions: consume extracted lockfile pins

     nodeselector

     committed
     2e04003View commit details

     Copy full SHA for 2e04003

     View code at this pointBrowse repository at this point

   • actions/unpinned-tag: normalize lockfile action identity

     nodeselector

     committed
     91faa26View commit details

     Copy full SHA for 91faa26

     View code at this pointBrowse repository at this point

   • actions: use US spelling in lockfile-aware pinning comments

     Show description for 2db34d2
     nodeselector

     committed
     2db34d2View commit details

     Copy full SHA for 2db34d2

     View code at this pointBrowse repository at this point

   • actions: scaffold lockfile-aware pinning for unpinned-tag

     Show description for 180c109
     nodeselector

     committed
     180c109View commit details

     Copy full SHA for 180c109

     View code at this pointBrowse repository at this point
6. Commits on Sep 7, 2026

   • Merge pull request #22454 from knewbury01/knewbury01/customize-actions-sanitizers-documentation

     Show description for 4239fee
     owen-mc

     authored
     4239feeView commit details

     Copy full SHA for 4239fee

     View code at this pointBrowse repository at this point
7. Commits on Sep 6, 2026

   • Apply suggestion from @owen-mc

     owen-mc

     authored
     f82774bView commit details

     Copy full SHA for f82774b

     View code at this pointBrowse repository at this point
8. Commits on Sep 2, 2026

   • Add actions.lock extraction

     Show description for 2377214
     hvitved

     committed
     2377214View commit details

     Copy full SHA for 2377214

     View code at this pointBrowse repository at this point
9. Commits on Aug 31, 2026

   • Improve wording on doc in actions/security/ControlChecks.qll

     knewbury01

     committed
     6c7aecaView commit details

     Copy full SHA for 6c7aeca

     View code at this pointBrowse repository at this point
10. Commits on Aug 28, 2026

    • Fix spelling mistake

      knewbury01

      committed
      029d5fbView commit details

      Copy full SHA for 029d5fb

      View code at this pointBrowse repository at this point
11. Commits on Aug 27, 2026

    • Fix spelling mistake

      knewbury01

      committed
      03edcb9View commit details

      Copy full SHA for 03edcb9

      View code at this pointBrowse repository at this point

    • Improve documentation on actions/security/ControlChecks.qll EnvironmentCheck

      knewbury01

      committed
      0323732View commit details

      Copy full SHA for 0323732

      View code at this pointBrowse repository at this point
12. Commits on Aug 24, 2026

    • Drop redundant `codeql.files.FileSystem` import

      Show description for 13a73b5
      

      redsun82

      and

      Copilot

      committed
      13a73b5View commit details

      Copy full SHA for 13a73b5

      View code at this pointBrowse repository at this point

    • Use inline expectations for Actions test

      Show description for fe3eaa8
      

      redsun82

      and

      Copilot

      committed
      fe3eaa8View commit details

      Copy full SHA for fe3eaa8

      View code at this pointBrowse repository at this point

    • Support distrusting Actions owners via `!owner` entries

      Show description for bdf8710
      

      redsun82

      and

      Copilot

      committed
      bdf8710View commit details

      Copy full SHA for bdf8710

      View code at this pointBrowse repository at this point
13. Commits on Aug 19, 2026

    • Actions: AssociationIfCheck should not protect events that do not populate the checked field

      Show description for 1a43007
      

      computersarebad

      and

      Copilot

      committed
      1a43007View commit details

      Copy full SHA for 1a43007

      View code at this pointBrowse repository at this point
14. Commits on Aug 18, 2026

    • Simplify EventActorIfCheck by binding context_prefix as a field

      Show description for e9d9d3a
      

      computersarebad

      and

      Copilot

      committed
      e9d9d3aView commit details

      Copy full SHA for e9d9d3a

      View code at this pointBrowse repository at this point

    • Split payload-field actor checks into EventActorIfCheck

      Show description for 3048f47
      

      computersarebad

      and

      Copilot

      committed
      3048f47View commit details

      Copy full SHA for 3048f47

      View code at this pointBrowse repository at this point
15. Commits on Aug 17, 2026

    • Actions: ActorIfCheck should not protect events that do not populate the checked field

      Show description for 9251d21
      

      computersarebad

      and

      Copilot

      committed
      9251d21View commit details

      Copy full SHA for 9251d21

      View code at this pointBrowse repository at this point
16. Commits on Aug 11, 2026

    • Merge branch 'main' into knewbury01/customize-actions-sanitizers

      mbaluda

      authored
      72ad4e5View commit details

      Copy full SHA for 72ad4e5

      View code at this pointBrowse repository at this point
17. Commits on Aug 5, 2026

    • Merge pull request #22260 from JarLob/fix/actions-cache-poisoning-cache-write-access

      Show description for 5d5b0c7
      aschackmull

      authored
      5d5b0c7View commit details

      Copy full SHA for 5d5b0c7

      View code at this pointBrowse repository at this point
18. Commits on Aug 4, 2026

    • Remove SelfHostedQuery completely

      JarLob

      committed
      22c5ab2View commit details

      Copy full SHA for 22c5ab2

      View code at this pointBrowse repository at this point

    • Merge branch 'main' of https://github.com/github/codeql into fix/actions-cache-poisoning-cache-write-access

      JarLob

      committed
      6a2d7beView commit details

      Copy full SHA for 6a2d7be

      View code at this pointBrowse repository at this point
19. Commits on Aug 3, 2026

    • Actions: Remove experimental self-hosted runner query

      Show description for 7a7dae0
      JarLob

      committed
      7a7dae0View commit details

      Copy full SHA for 7a7dae0

      View code at this pointBrowse repository at this point
20. Commits on Jul 31, 2026

    • Merge github/main into fix/actions-cache-poisoning-cache-write-access

      Show description for 827af90
      JarLob

      committed
      827af90View commit details

      Copy full SHA for 827af90

      View code at this pointBrowse repository at this point