gh-actions-doctor v1.0.0

Highlights

• First stable release of gh-actions-doctor.
• Stabilizes CLI help and option behavior, JSON/SARIF contracts, baseline pruning, suppression visibility, and safe fix behavior.
• Refreshes README, package metadata, GitHub Action examples, and Code Scanning examples for v1.0.0.
• Keeps CI validation for build, tests, pack, sample scans, SARIF, annotations, and safe fixes.

Validation

• dotnet build GhActionsDoctor.sln --configuration Release --no-restore
• dotnet test GhActionsDoctor.sln --configuration Release --no-build (108 tests)
• dotnet pack src/GhActionsDoctor.Cli --configuration Release --no-build
• Local tool install and scan/fix smoke tests from gh-actions-doctor.1.0.0.nupkg
• Suppression visibility smoke test
• Main CI passed: 27103139535

gh-actions-doctor v0.9.0

Highlights

• Adds release workflow token, remote script execution, and secret echo risk rules.
• Adds SARIF partial fingerprints for steadier Code Scanning alert tracking.
• Adds machine-readable schemas for JSON output, baselines, and configuration.
• Hardens baseline pruning and suppression reporting with --show-suppressions.
• Removes old agent implementation roadmap files from the published docs.

Validation

• dotnet build GhActionsDoctor.sln --configuration Release --no-restore
• dotnet test GhActionsDoctor.sln --configuration Release --no-build (103 tests)
• dotnet pack src/GhActionsDoctor.Cli --configuration Release --no-build
• Local tool install and scan/fix smoke tests
• Main CI passed: 27100038220

gh-actions-doctor v0.7.0

Highlights

• Added GitHub annotations and SARIF output.
• Added official composite GitHub Action wrapper and Code Scanning docs.
• Added conservative fix command for missing permissions and timeouts.
• Added advanced security rules for OIDC, pull_request_target checkout, and untrusted shell expressions.
• Added baseline suppression, baseline generation, inline suppression comments, and an adoption guide.
• Fixed release hardening issues found during review before publishing.

Validation

• Main CI passed for commit 6f15027.
• dotnet build GhActionsDoctor.sln --configuration Release --no-restore
• dotnet test GhActionsDoctor.sln --configuration Release --no-build
• dotnet pack src\GhActionsDoctor.Cli --configuration Release --no-build
• Local tool smoke tests for SARIF output and safe fix dry-run.

gh-actions-doctor v0.2.0

Highlights

• Adds repository-local .gh-actions-doctor.yml / .yaml configuration support.
• Adds --config <path|none> for explicit config loading or disabling.
• Supports config-driven path, output format, fail threshold, strict mode, include/exclude rules, disabled rules, and per-rule severity overrides.
• Documents configuration and CLI precedence.

Validation

• dotnet test GhActionsDoctor.sln
• dotnet clean GhActionsDoctor.sln --configuration Release
• dotnet build GhActionsDoctor.sln --configuration Release
• dotnet test GhActionsDoctor.sln --configuration Release --no-build
• dotnet pack src/GhActionsDoctor.Cli --configuration Release --no-build
• local tool install and sample scan from samples/bad

gh-actions-doctor v0.1.0

Highlights

• Promotes gh-actions-doctor from 0.1.0-preview.1 to 0.1.0.
• Adds expanded parser and reporter coverage for the polished MVP milestone.
• Refreshes package metadata, README, status docs, roadmap, and security support notes.
• Updates test dependencies while keeping the xUnit v2 adapter line pinned to avoid duplicate discovery.

Validation

• dotnet test GhActionsDoctor.sln
• dotnet clean GhActionsDoctor.sln --configuration Release
• dotnet test GhActionsDoctor.sln --configuration Release
• dotnet pack src/GhActionsDoctor.Cli --configuration Release --no-build
• local tool install and sample scan from samples/bad

v0.1.0-preview.1

gh-actions-doctor 0.1.0-preview.1

First public preview of gh-actions-doctor.

Highlights

• .NET global tool package metadata
• Workflow discovery for GitHub Actions YAML files
• Safe YAML parse-error reporting
• Text and JSON output
• Fail-on severity support
• Include/exclude rule filtering
• Strict mode
• Source locations for many findings
• 10 built-in workflow hygiene rules
• Public docs, rule docs, changelog, contribution guide, security policy, and CI self-scan

Validation

• CI is green on main
• 69 tests passing
• Local tool install from the generated package was verified

This is a preview release. NuGet publishing is intentionally separate from this GitHub release.