Skip to content

Release v2.0.1

Latest
Marketplace
Latest
Marketplace

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 03:56
v2.0.1
This tag was signed with the committer’s verified signature.
aabashkin Anton Abashkin
GPG key ID: 6D2229EA9D47020C
Verified
Learn about vigilant mode.
4c19a88
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Features

  • feat: add Marketplace branding icon and color

Bug Fixes

  • fix(ci): accept dotted prerelease suffixes in release tags
  • fix(ci): stop floating major tags from triggering releases
  • fix(ci): give the major version tag job a git identity

Security

Documentation

  • docs: document SHA pinning and use an explicit placeholder

Testing

Other Changes

  • ci: bump softprops/action-gh-release from 2.6.2 to 3.0.2
  • ci: bump actions/download-artifact from 4.3.0 to 8.0.1
  • ci: bump actions/upload-artifact from 4.6.2 to 7.0.1

Full Changelog: https://github.com/platform-sec/opengrep-action/compare/v2.0.0..v2.0.1

Installation

- name: Run OpenGrep Security Scan
  uses: platform-sec/opengrep-action@v2.0.1
  with:
    target: 'src/'
    patterns: 'auto'
    severity: 'WARNING'

Security

This release has been automatically scanned for security vulnerabilities.
Download the security scan results from the release workflow artifacts.

Verification

To verify the integrity of this release:

# Download and verify checksums
curl -L https://github.com/platform-sec/opengrep-action/releases/download/v2.0.1/checksums.txt
sha256sum -c checksums.txt
Assets 4
Loading