Skip to content

Workflow Sentry v1.2.0

Choose a tag to compare

View all tags
@LoganPendragonmulti LoganPendragonmulti released this 30 Sep 17:26
· 7 commits to main since this release
v1.2.0
5aa0877
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Workflow Sentry 1.2.0

  • Add WS010–WS014 for privileged checkout/event/artifact chains, mutable container actions, and remote scripts piped into interpreters.
  • Recognize list-style workflow triggers as well as string and mapping forms.
  • Add standalone HTML reports with review state and suggested remediation, plus --list-rules.
  • Add --root, repeatable --exclude, and baseline-backed --new-only failure control.
  • Retain existing default failure thresholds, value-free findings, review exceptions, JSON/Markdown/SARIF formats, and read-only analysis.

Verified: 20 tests, 96.92% coverage, lint/types, six OS/Python CI jobs, CodeQL, dependency audit and the tagged packaging workflow. Standalone static analysis; no workflows or network requests executed by the tool.

Assets 4
Loading