Skip to content

v17.2.1

Latest
Latest

Choose a tag to compare

View all tags
@sraisl sraisl released this 26 Oct 07:39
v17.2.1
d8d54a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • hadolint, gosec, zizmor, gitleaks, betterleaks, trufflehog and trivy reuse a binary already on PATH only when it reports the version pinned in tools.lock.json, as oxlint, OpenGrep, Semgrep and Bandit already did. A different version is ignored with the warning Ignoring <tool> from PATH because it is not the pinned version <version>, and the pinned release is downloaded and verified instead. Scan results no longer depend on a scanner preinstalled on the runner image, and the pinned version shown in the reports is the one that ran.

See the changelog for details.

Assets 2
Loading