Skip to content

v0.0.0-dev

Latest

Choose a tag to compare

@github-actions github-actions released this 01 Jan 10:31

Changelog

  • 43f7445 Block awk/gawk/mawk inline code execution (ENVIRON bypass)
  • ccef5b4 Block npm/yarn/pnpm/bun script execution (run, start, test, exec, npx)
  • 547c294 Fix install.sh to fetch latest release from GitHub API
  • 954be96 Fix node -p and other interpreter inline execution detection
  • a2a222b Switch to ALLOWLIST approach for maximum security
  • 6fb5c56 Universal -e flag detection to catch all languages (swift, etc.)