Adding comprehensive docs for customizing actions/unpinned-tag query
#19427
+40
−1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
There was a problem hiding this comment.
Pull Request Overview
This pull request adds documentation to help users customize the behavior of the UnpinnedActionsTag query by providing detailed configuration instructions and examples.
- Updated UnpinnedActionsTag.md to include a reference link to the customization guide.
- Added a new file, UnpinnedActionsTag-CUSTOMIZING.md, with step-by-step configuration instructions and examples.
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| actions/ql/src/Security/CWE-829/UnpinnedActionsTag.md | Added reference to the customizing guide to inform users about extending the trusted Action publishers list. |
| actions/ql/src/Security/CWE-829/UnpinnedActionsTag-CUSTOMIZING.md | New documentation file with configuration steps and examples for customizing trusted Action publishers. |
actions/ql/src/Security/CWE-829/UnpinnedActionsTag-CUSTOMIZING.md
Outdated
Show resolved
Hide resolved
actions/ql/src/Security/CWE-829/UnpinnedActionsTag-CUSTOMIZING.md
Outdated
Show resolved
Hide resolved
adityasharad
approved these changes
May 1, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request introduces documentation updates for customizing the behavior of the
UnpinnedActionsTagquery in CodeQL. The changes include detailed instructions on how to extend the list of trusted Action publishers and a reference link to the customization guide. Inspired by lack of visibility here: #18316 (comment)Documentation Enhancements:
A new section in
customizing-library-models-for-actions.rstexplains how to configure a data extension model pack to allow specific Action publishers, preventing security alerts for unpinned tags from these publishers. This includes step-by-step instructions and example configuration files.