Skip to content

v2.3.4

Latest

Choose a tag to compare

@github-actions github-actions released this 08 Sep 02:22

Fixes a secret-protection false positive where an allowlisted file was still blocked when it was passed as an assignment value.

Fixed

  • Fixed allowlisted paths being blocked when supplied through an export assignment or Git's global -c option, such as export GIT_SSL_CAINFO=/path/to/ca.pem or git -c http.sslCAInfo=/path/to/ca.pem ls-remote origin. Explicit denyPaths entries and coding-CLI configuration protection still take precedence, and ordinary filenames containing = are still inspected as paths. (#109)