Daniel George Holz

dynamic render path check fires on component inheriting from ViewComponent::Base (but from a gem)

2

### Background Brakeman version: 5.2.1 Rails version: 6.1.4.4 Ruby version: 3.0.3 Link to Rails application code: it's private #### False Positive *Full* warning from Brakeman: `Warning: Render path contains parameter...

[Blocked] Warnings about unexpected inputs

26

Hello, I have a step in my workflow like: ``` - name: Get count of commits ahead of merge base id: github_compare uses: octokit/[email protected] with: route: GET /repos/:repository/compare/:base...:head repository: ${{...

`gh run download` can't download artifacts from current run when executed in a workflow

8

### Describe the bug I have a job in a GitHub Actions workflow that generates an artifact and uploads it. I want to download it in a subsequent job &...

Rugged::Repository.merge_base complains when the merge base is a graft

1

Hello, I have some CI jobs that try to avoid checking out unnecessary commits for merges. They call the GitHub API to see how many commits behind/ahead they are, compared...

cache path is hard-coded, can't be set by user

6

Hi, I wanted to save and restore to a file outside of `vendor`. I wanted to use Brakeman to scan my app, and include some code from one of my...

fix: sanitise GITHUB_REF to be a valid tag value

11

Fixes #247 *Description of changes:* Applies the same sanitization to Branch as is applied to Workflow. By submitting this pull request, I confirm that you can use, modify, copy, and...

Add channel for Rubocop 1.50

1

Following on from #308, since https://github.com/rubocop/rubocop/releases/tag/v1.25.0 has been released in the meantime Hi, we'd like to update the version of RuboCop we install to match the latest available version (1.25.0)....

Add channel for Rubocop 1.24.1

5

Hi, we'd like to update the version of Rubocop we install to match the latest available version (`1.24.1`). I don't see a matching `channel` branch on this repo, nor a...

`gh run view --attempt`

2

### Should be able to choose which attempt of a run to view Following on from #5629, now `gh run view` only shows the latest attempt. Which means you can...

Values that look like timestamps in `env` blocks get parsed and reformatted

3

**Describe the bug** Sometimes the runner will take a value for a variable set in an `env` block and change it, if the value looks like a timestamp. **To Reproduce**...