Skip to content

v1.15.1 - SARIF output and expanded GitHub Action inputs

Choose a tag to compare

View all tags
@sonukapoor sonukapoor released this 13 May 00:29
v1.15.1
This tag was signed with the committer’s verified signature.
sonukapoor Sonu Kapoor
GPG key ID: 3306B2C5600CA6DB
Verified
Learn about vigilant mode.
87fdf4a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • GitHub Action now exposes --usage, --only-used, --sarif, and --no-cache inputs. The no-cache input defaults to true in CI since runners are ephemeral.
  • --sarif flag writes a SARIF 2.1.0 file to the current directory for upload to GitHub Code Scanning. One result per CVE, rules deduplicated, severity mapped to SARIF levels.

Validation

  • npm test
  • npm run build
Assets 3
Loading