Skip to content

v0.6.0

Choose a tag to compare

@github-actions github-actions released this 22 Oct 01:28

What's Changed

  • feat(validate): detect template injection in run: steps by @jabranr in #62
  • feat(validate): flag missing or excessive GITHUB_TOKEN permissions by @jabranr in #63
  • feat(validate): flag dangerous triggers with untrusted checkout by @jabranr in #64
  • feat(run): add --env-file, --secret-file, --input-file and --var-file by @jabranr in #65
  • feat: add secureci pin to rewrite action tags to commit SHAs by @jabranr in #66
  • feat(inventory): flag actions with known security advisories by @jabranr in #67
  • feat(run): add --matrix key:value to run a subset of combinations by @jabranr in #68
  • feat: build standalone binaries with checksums and provenance by @jabranr in #69
  • feat(run): run independent jobs and matrix combinations in parallel by @jabranr in #70

Full Changelog: v0.5.1...v0.6.0