Fgi #43480

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

ghost wants to merge 1,831 commits into github:copilot/add-changelog-file from jittiphonds1990-stack:main

Closed

Fgi #43480

Merge pull request #43474 from github/repo-sync

GitHub Advanced Security / CodeQL failed Mar 21, 2026 in 9s

5 new alerts including 5 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

5 high

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 39 in src/article-api/tests/github-apps-transformer.ts

Code scanning / CodeQL

Bad HTML filtering regexp High test

This regular expression does not match comments containing newlines.

Check failure on line 21 in src/article-api/tests/secret-scanning-transformer.ts

Code scanning / CodeQL

Bad HTML filtering regexp High test

This regular expression does not match comments containing newlines.

Check failure on line 142 in src/article-api/transformers/github-apps-transformer.ts

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain

, which may cause an HTML element injection vulnerability.

Check failure on line 67 in src/article-api/transformers/secret-scanning-transformer.ts

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain

, which may cause an HTML element injection vulnerability.

Check failure on line 149 in src/frame/lib/page.ts

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a

.
This path depends on a

.
This path depends on a

.