Skip to content

v2.12.0

Latest
Marketplace
Latest
Marketplace
Compare
Choose a tag to compare
@varunsh-coder varunsh-coder released this 21 Apr 19:06
· 2 commits to main since this release
v2.12.0
0634a26
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: v2...v2.12.0

Assets 2
Loading