Commits

History for

onfix/zizmor-workflow-security

Commits on Mar 23, 2026

Update required Python version, tweak CI checks (#172)
Show description for 27a4738
lelia
authored
27a4738
Copy full SHA for 27a4738

Commits on Mar 12, 2026

Fix reachability filtering, add config file support (#169)
Show description for 637eda7
lelia
authored
637eda7
Copy full SHA for 637eda7

Commits on Mar 6, 2026

Fix has_manifest_files failing to match root-level manifest files (#168)
Show description for 4903ae3

David Larsen (dc-larsen)
and
lelia
authored
4903ae3
Copy full SHA for 4903ae3

Commits on Mar 4, 2026

SARIF file output and reachability filtering (#165)
Show description for b8b49f5
lelia
authored
b8b49f5
Copy full SHA for b8b49f5

Commits on Mar 3, 2026

Update SDK version to fix `workspace` issue (#167)
Show description for c281d6d
lelia
authored
c281d6d
Copy full SHA for c281d6d

Commits on Feb 26, 2026

Add `workspace` flag to CLI args (#164)
Show description for ceb3572
lelia
authored
ceb3572
Copy full SHA for ceb3572
Mucha/gitlab branch protection flag (#163)
Show description for b3fdd33

authored
b3fdd33
Copy full SHA for b3fdd33

Commits on Feb 5, 2026

e2e tests for full scans
Martin Torp (mtorp)
committed
b0c00be
Copy full SHA for b0c00be

Commits on Jan 22, 2026

Add strace to Docker image
Show description for 628e386
Martin Torp (mtorp)
committed
628e386
Copy full SHA for 628e386

Commits on Jan 21, 2026

Set the scan type to socket_tier1 when using the reachability flag
Martin Torp (mtorp)
committed
92ebc97
Copy full SHA for 92ebc97

Commits on Jan 20, 2026

fix description
Martin Torp (mtorp)
committed
c4cd89a
Copy full SHA for c4cd89a

Commits on Jan 19, 2026

feat: add new reachability flags and change analysis splitting default
Show description for b8231bb
Martin Torp (mtorp)
committed
b8231bb
Copy full SHA for b8231bb

Commits on Jan 16, 2026

Mucha dev gitlab security output (#147)
Show description for 3defe2e

authored
3defe2e
Copy full SHA for 3defe2e
Mucha dev fail on any block (#149)
Show description for 54e6ec7

authored
54e6ec7
Copy full SHA for 54e6ec7
feat: add PyPy installation for Alpine on x86_64 (#148)
Show description for 0f0127a

Oskar Haarklou Veileborg (BarrensZeppelin)
and
Douglas (dacoburn)
authored
0f0127a
Copy full SHA for 0f0127a

Commits on Jan 5, 2026

Incremented to newer SDK support for fix for PR Number (#146)
Douglas (dacoburn)
authored
d0886a5
Copy full SHA for d0886a5
Added support to do a Slack Bot instead of just a Slack WebHook (#145)
Show description for 58bcf76
Douglas (dacoburn)
authored
58bcf76
Copy full SHA for 58bcf76

Commits on Jan 2, 2026

feat: add Slack formatter for Socket Facts reachability analysis (#144)
Show description for 13b8fe5
Douglas (dacoburn)
authored
13b8fe5
Copy full SHA for 13b8fe5

Commits on Dec 24, 2025

Fixed globbing for files that were unintentionally filtering out path… (#143)
Show description for 0b7f49a
Douglas (dacoburn)
authored
0b7f49a
Copy full SHA for 0b7f49a

Commits on Dec 18, 2025

fix GOROOT when go is installed via apk
Martin Torp (mtorp)
committed
e10dd4e
Copy full SHA for e10dd4e
remove process timeout from reachability analysis (#141)
Show description for 30574b8

Martin Torp (mtorp)
and
Douglas (dacoburn)
authored
30574b8
Copy full SHA for 30574b8

Commits on Dec 12, 2025

feat: add batched PURL endpoint calls and conditional license fetching (#140)
Show description for 7329f50
Douglas (dacoburn)
authored
7329f50
Copy full SHA for 7329f50

Commits on Dec 10, 2025

Fixing hatch versioning (#139)
Show description for 40530ce
Douglas (dacoburn)
authored
40530ce
Copy full SHA for 40530ce
Adds the `--reach-use-only-pregenerated-sboms` flag (#138)
Show description for c2deb21

Martin Torp (mtorp)
and
Douglas (dacoburn)
authored
c2deb21
Copy full SHA for c2deb21

Commits on Dec 2, 2025

Removed Security Policy logic completely as it is no longer needed
Douglas (dacoburn)
committed
69da876
Copy full SHA for 69da876

Commits on Dec 1, 2025

remove the need for getting the security policy
Ola Adekola (olalikeola)
committed
6d8a90a
Copy full SHA for 6d8a90a
pr comments + version bump
Ola Adekola (olalikeola)
committed
8d7944d
Copy full SHA for 8d7944d
flter out ignored alerts
Ola Adekola (olalikeola)
committed
546eaed
Copy full SHA for 546eaed

Commits on Nov 27, 2025

finalize tier 1 reachability scans (#135)
Show description for 89cf920

Martin Torp (mtorp)
and
Douglas (dacoburn)
authored
89cf920
Copy full SHA for 89cf920

Commits on Nov 26, 2025

Doug/fix reachability engine cwd (#134)
Show description for 5fb953d
Douglas (dacoburn)
authored
5fb953d
Copy full SHA for 5fb953d

Commits on Nov 25, 2025

add support for workflow_dispatch to Github (#133)
Douglas (dacoburn)
authored
6c97b6a
Copy full SHA for 6c97b6a

Commits on Nov 21, 2025

Since the API Changes to not accept unsupported files changed the tem… (#132)
Show description for 106766e
Douglas (dacoburn)
authored
106766e
Copy full SHA for 106766e

Commits on Nov 17, 2025

Add --reach-disable-analysis-splitting flag and fix Docker entrypoint (#131)
Show description for 1ab83ab
Douglas (dacoburn)
authored
1ab83ab
Copy full SHA for 1ab83ab

Commits on Nov 15, 2025

Doug/add reach params and fix unverified flag (#130)
Show description for c3d4a77
Douglas (dacoburn)
authored
c3d4a77
Copy full SHA for c3d4a77

Commits on Nov 11, 2025

Fix comment issues with regression introduced in 2.2.15 (#129)
Douglas (dacoburn)
authored
55ebf3d
Copy full SHA for 55ebf3d