Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: boostsecurityio/poutine
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.15.2
Choose a base ref
...
head repository: boostsecurityio/poutine
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.16.0
Choose a head ref
  • 11 commits
  • 41 files changed
  • 4 contributors

Commits on Nov 20, 2024

  1. build(deps): bump github/codeql-action from 3.26.10 to 3.27.0 (#229)

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.10 to 3.27.0.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@e2b3eaf...6624720)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    bb4ce73 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump actions/checkout from 4.2.0 to 4.2.2 (#228)

    Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.2.
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@d632683...11bd719)
    
    ---
    updated-dependencies:
    - dependency-name: actions/checkout
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    d6b5f70 View commit details
    Browse the repository at this point in the history
  3. build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 (#227)

    Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.0 to 4.4.3.
    - [Release notes](https://github.com/actions/upload-artifact/releases)
    - [Commits](actions/upload-artifact@5076954...b4b15b8)
    
    ---
    updated-dependencies:
    - dependency-name: actions/upload-artifact
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    d3b6a15 View commit details
    Browse the repository at this point in the history
  4. build(deps): bump actions/dependency-review-action from 4.3.4 to 4.4.0 (

    #226)
    
    Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.4 to 4.4.0.
    - [Release notes](https://github.com/actions/dependency-review-action/releases)
    - [Commits](actions/dependency-review-action@5a2ce3f...4081bf9)
    
    ---
    updated-dependencies:
    - dependency-name: actions/dependency-review-action
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    df73578 View commit details
    Browse the repository at this point in the history
  5. build(deps): bump github.com/open-policy-agent/opa from 0.69.0 to 0.7…

    …0.0 (#225)
    
    Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.69.0 to 0.70.0.
    - [Release notes](https://github.com/open-policy-agent/opa/releases)
    - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
    - [Commits](open-policy-agent/opa@v0.69.0...v0.70.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/open-policy-agent/opa
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    0b06611 View commit details
    Browse the repository at this point in the history
  6. build(deps): bump github.com/schollz/progressbar/v3 (#224)

    Bumps [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) from 3.16.1 to 3.17.0.
    - [Release notes](https://github.com/schollz/progressbar/releases)
    - [Commits](schollz/progressbar@v3.16.1...v3.17.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/schollz/progressbar/v3
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    3c7fc99 View commit details
    Browse the repository at this point in the history
  7. build(deps): bump github.com/xanzy/go-gitlab from 0.110.0 to 0.112.0 (#…

    …223)
    
    Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.110.0 to 0.112.0.
    - [Release notes](https://github.com/xanzy/go-gitlab/releases)
    - [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go)
    - [Commits](xanzy/go-gitlab@v0.110.0...v0.112.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/xanzy/go-gitlab
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Nov 20, 2024
    Configuration menu
    Copy the full SHA
    8063b5e View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    871a8db View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2024

  1. Configuration menu
    Copy the full SHA
    7ec9820 View commit details
    Browse the repository at this point in the history
  2. Resolve Repo Local Actions (#213)

    * resolving local githubactions s that we have complete purls for them
    
    * fix unpinnable action rule
    
    * error out for invalid local resolution
    SUSTAPLE117 authored Nov 21, 2024
    Configuration menu
    Copy the full SHA
    eaa5c38 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2024

  1. feat(findings): include 'event_triggers' in finding metadata (#233)

    * feat(findings): include 'event_triggers' in finding metadata
    
    Signed-off-by: Bryce Thuilot <[email protected]>
    
    * Rego linting with opa fmt --write .
    
    ---------
    
    Signed-off-by: Bryce Thuilot <[email protected]>
    Co-authored-by: François Proulx <[email protected]>
    bthuilot and fproulx-boostsecurity authored Nov 22, 2024
    Configuration menu
    Copy the full SHA
    4d52b8e View commit details
    Browse the repository at this point in the history
Loading