Tim Knight

Hi, @dxa4481 - we do not currently run with `--only-verified` and I can confirm this is not showing as verified. I am adding a line of code to allow us...

```json { "SourceMetadata": { "Data": { "Git": { "commit": "478b68d2f2be5e4d95718c479e7ce4aa0f031601", "file": ".../StopSubscriptionServiceImpl.java", "email": "....", "repository": "...", "timestamp": "2023-09-12 13:45:22 +0000", "line": 156 } } }, "SourceID": 1, "SourceType": 16, "SourceName":...

I'll share this with my SecDev colleagues and we can discuss, thanks I still think the bug is quite unpleasant

Very keen on this, currently trying to migrate some internal gitlab-ci.yml, so want to replace ```yaml includes: - project: 'a/b/c' ref: 2-2-0 ``` with either ```yaml includes: - project: 'z/x/y'...

> Sorry for a late reply. > > I obviously applaud the action upgrade but is token really a secret for public repos? I am sure that we made it...