Skip to content

v0.1.2 - CodeQL Remediation

Latest
Latest

Choose a tag to compare

View all tags
@ry-ops ry-ops released this 14 Feb 22:29
· 121 commits to main since this release
v0.1.2
a15157c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security Fixes

  • CodeQL High x3: Replaced raw error.message logging in CLI with generic messages to prevent clear-text logging of sensitive information
  • CodeQL Medium x1: Pinned astral-sh/setup-uv to commit SHA in GitHub Actions workflow

Improvements

  • Added DEBUG env var support — run with DEBUG=1 git-steer <command> for verbose error output

Full Changelog: v0.1.1...v0.1.2

Assets 2
Loading