feat!: add more inputs to Macaron Action and improve GitHub Action analysis#1339

Merged

behnazh-w merged 30 commits intomainfrom

behnazh/detect-injection-gha

Mar 31, 2026

Commits on Mar 30, 2026

feat!: add more inputs to Macaron Action and improve GitHub Action analysis
behnazh-w
committed
chore: add missing policy and disable some injection checks
behnazh-w
committed
chore: improve the action summary
behnazh-w
committed
chore: test check based summary
behnazh-w
committed
feat: add sql files for existing policies
behnazh-w
committed
chore: refine the summary output
behnazh-w
committed
fix: fix issues in summaries
behnazh-w
committed
test: should fail when policy verify fails
behnazh-w
committed
chore: added expected failure guards
behnazh-w
committed
chore: improve the summary table
behnazh-w
committed
chore: test other patterns
behnazh-w
committed
test: debug local failure
behnazh-w
committed
fix: fix import and policy purl input
behnazh-w
committed
test: run action on the test image
behnazh-w
committed
test: expect the gha tests to fail
behnazh-w
committed
chore: change the table schema
behnazh-w
committed
test: test priorities
behnazh-w
committed
chore: improve table summary
behnazh-w
committed
chore: improve the summary and result details
behnazh-w
committed
chore: add summary column for workflow security issues
behnazh-w
committed
chore: change the table schema
behnazh-w
committed
chore: test other bug types
behnazh-w
committed
fix: fix issue in report summary
behnazh-w
committed
chore: add line info for script exec bug type
behnazh-w
committed
test: test mapping gh variables in bashparser
behnazh-w
committed
test: turn all tests on
behnazh-w
committed
test: fix the snapshot content
behnazh-w
committed
chore: improve the fallback solution for ref expansion
behnazh-w
committed
test: update log4j integration tests
behnazh-w
committed
fix: fix duplicate repo issues
behnazh-w
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat!: add more inputs to Macaron Action and improve GitHub Action analysis#1339

feat!: add more inputs to Macaron Action and improve GitHub Action analysis#1339
behnazh-w merged 30 commits intomainfrom
behnazh/detect-injection-gha

Commits on Mar 30, 2026

feat!: add more inputs to Macaron Action and improve GitHub Action analysis

chore: add missing policy and disable some injection checks

chore: improve the action summary

chore: test check based summary

feat: add sql files for existing policies

chore: refine the summary output

fix: fix issues in summaries

test: should fail when policy verify fails

chore: added expected failure guards

chore: improve the summary table

chore: test other patterns

test: debug local failure

fix: fix import and policy purl input

test: run action on the test image

test: expect the gha tests to fail

chore: change the table schema

test: test priorities

chore: improve table summary

chore: improve the summary and result details

chore: add summary column for workflow security issues

chore: change the table schema

chore: test other bug types

fix: fix issue in report summary

chore: add line info for script exec bug type

test: test mapping gh variables in bashparser

test: turn all tests on

test: fix the snapshot content

chore: improve the fallback solution for ref expansion

test: update log4j integration tests

fix: fix duplicate repo issues