JS: Report command injection through child_process argument arrays when shell is enabled · github/codeql@eb2db24

Re-run triggered November 11, 2026 09:05

asgerf

#22978

Status Success

Total duration 2m 53s

Artifacts 2

ql-for-ql-build.yml

on: pull_request

1 warning

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache/restore@v3, actions/cache@v3, actions/github-script@v6, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Produced during runtime

Name	Size	Digest
ql-for-ql-langs	26.8 MB	`sha256:7dedb646c7b7b0e800e17ab63c254b62c2f8bfc690ef101559c2795b5e2a409b`
ql-for-ql.sarif	1.61 MB	`sha256:f26be4de14306e4f40539139d64c4d5b39d257272299b345953fa563650123e4`