butlergroup / caddy-gateway / 41375589719
0%

DEFAULT BRANCH: master
Ran
Jobs 3
Files 46
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 0.0%. Remained the same
41375589719

push

github

web-flow 
build(deps): Bump microsoft/security-devops-action from 1.12.0 to 1.12.1

Bumps [microsoft/security-devops-action](https://github.com/microsoft/security-devops-action) from 1.12.0 to 1.12.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/microsoft/security-devops-action/releases">microsoft/security-devops-action's releases</a>.</em></p>
<blockquote>
<h2>v1.12.1 - Brotli response-path mitigation</h2>
<h2>Security mitigation</h2>
<p>This patch mitigates the NuGet metadata response-decoding path for <a href="https://nodejs.org/en/blog/vulnerability/october-2026-security-releases">CVE-2026-111497</a>.</p>
<ul>
<li>Decline Brotli responses and reject unsupported content encodings before decompression.</li>
<li>Preserve identity, gzip and deflate handling, package downloads, authentication and cache behavior.</li>
<li>Propagate response/decompression failures explicitly.</li>
<li>Include a Windows/Linux response-security matrix and compatible scan-verification uploads.</li>
</ul>
<p>The mitigation is backported to the existing release lineage through [PR <a href="https://redirect.github.com/microsoft/security-devops-action/issues/278">#278</a>](<a href="https://redirect.github.com/microsoft/security-devops-action/pull/278">microsoft/security-devops-action#278</a>), following [toolkit PR <a href="https://redirect.github.com/microsoft/security-devops-action/issues/24">#24</a>](<a href="https://redirect.github.com/microsoft/security-devops-actions-toolkit/pull/24">microsoft/security-devops-actions-toolkit#24</a>). [PR <a href="https://redirect.github.com/microsoft/security-devops-action/issues/279">#279</a>](<a href="https://redirect.github.com/microsoft/security-devops-action/pull/279">microsoft/security-devops-action#279</a>) adopts it separately on main. This release does not promote unrelated main changes.</p>
<h2>Upgrade</h2>
<pre lang="yaml"><code>- uses: microsoft/security-devops-action@v1.12.1
</code></pre>
... (continued)

0 of 3264 relevant lines covered (0.0%)

0.0 hits per line

Jobs
ID Job ID Ran Files Coverage
1 41375589719.1 46
0.0
GitHub Action Run
2 41375589719.2 46
0.0
GitHub Action Run
3 41375589719.3 46
0.0
GitHub Action Run
Source Files on build 41375589719