FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[Original HTTPS Page]
Check `package-lock.json` for wrong addresses by mbg · Pull Request #4192 · github/codeql-action · GitHub
Check `package-lock.json` for wrong addresses by mbg · Pull Request #4192 · github/codeql-action · GitHub
Skip to content
Navigation Menu
Sign in
Appearance settings
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
See all industries
View all solutions
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql-action
Repository navigation
Code
Issues
163
(163)
Pull requests
37
(37)
Actions
Security and quality
2
(2)
Insights
Check package-lock.json for wrong addresses
- #4192
#4192
Merged
mbg
merged 3 commits into
main
github/codeql-action:main
from
mbg/project-changes
github/codeql-action:mbg/project-changes
Copy head branch name to clipboard
Oct 2, 2026
Conversation
Commits
3
(3)
Checks
Files changed
Merged
Check package-lock.json for wrong addresses
#4192
mbg
merged 3 commits into
main
github/codeql-action:main
from
mbg/project-changes
github/codeql-action:mbg/project-changes
Copy head branch name to clipboard
Normalise feed URLs in `package-lock.json`
b948c4d
Select commit
Loading
Failed to load commit list.
Uh oh!
There was an error while loading.
Please reload this page
.
PR Checks
on: push
41
Unit Tests (ubuntu-latest, 20)
Unit Tests (ubuntu-latest, 24)
Unit Tests (macos-latest, 20)
Unit Tests (macos-latest, 24)
Unit Tests (windows-latest, 20)
Unit Tests (windows-latest, 24)
Other checks
Post repo size comment
PR Check - Remote config file
on: pull_request
16
Remote config file (ubuntu-latest, linked)
Remote config file (ubuntu-latest, nightly-latest)
PR Check - Go: tracing with legacy workflow
on: pull_request
29
Go: tracing with legacy workflow (ubuntu-latest, stable-v2.19.4)
Go: tracing with legacy workflow (ubuntu-latest, stable-v2.20.7)
Go: tracing with legacy workflow (ubuntu-latest, stable-v2.21.4)
Go: tracing with legacy workflow (ubuntu-latest, stable-v2.22.4)
Go: tracing with legacy workflow (ubuntu-latest, stable-v2.23.9)
Go: tracing with legacy workflow (ubuntu-latest, stable-v2.24.3)
Go: tracing with legacy workflow (ubuntu-latest, default)
Go: tracing with legacy workflow (ubuntu-latest, linked)
Go: tracing with legacy workflow (macos-latest, linked)
Go: tracing with legacy workflow (ubuntu-latest, nightly-latest)
Go: tracing with legacy workflow (macos-latest, nightly-latest)
PR Check - Start proxy
on: pull_request
5
Start proxy (ubuntu-latest, linked)
Start proxy (macos-latest, linked)
Start proxy (windows-latest, linked)
PR Check - Packaging: Config and input
on: pull_request
24
Packaging: Config and input (ubuntu-latest, linked)
Packaging: Config and input (ubuntu-latest, default)
Packaging: Config and input (ubuntu-latest, nightly-latest)
PR Check - Custom source root
on: pull_request
9
Custom source root (ubuntu-latest, linked)
Custom source root (ubuntu-latest, default)
Custom source root (ubuntu-latest, nightly-latest)
PR Check - Debug artifacts after failure
on: pull_request
41
Upload debug artifacts after failure in analyze (stable-v2.20.3)
Upload debug artifacts after failure in analyze (default)
Upload debug artifacts after failure in analyze (linked)
Upload debug artifacts after failure in analyze (nightly-latest)
Download and check debug artifacts after failure in analyze
PR Check - All-platform bundle
on: pull_request
26
All-platform bundle (ubuntu-latest, nightly-latest)
All-platform bundle (macos-latest-xlarge, nightly-latest)
All-platform bundle (windows-latest, nightly-latest)
PR Check - Rust analysis
on: pull_request
13
Rust analysis (ubuntu-latest, stable-v2.19.4)
Rust analysis (ubuntu-latest, stable-v2.22.1)
Rust analysis (ubuntu-latest, linked)
Rust analysis (ubuntu-latest, default)
Rust analysis (ubuntu-latest, nightly-latest)
PR Check - Debug artifact upload
on: pull_request
41
Upload debug artifacts (stable-v2.20.3)
Upload debug artifacts (default)
Upload debug artifacts (linked)
Upload debug artifacts (nightly-latest)
Download and check debug artifacts
PR Check - Extractor ram and threads options test
on: pull_request
3
Extractor ram and threads options test (ubuntu-latest, linked)
PR Check - Multi-language repository
on: pull_request
161
Multi-language repository (ubuntu-latest, stable-v2.19.4)
Multi-language repository (macos-15-xlarge, stable-v2.19.4)
Multi-language repository (ubuntu-latest, stable-v2.20.7)
Multi-language repository (macos-15-xlarge, stable-v2.20.7)
Multi-language repository (ubuntu-latest, stable-v2.21.4)
Multi-language repository (macos-15-xlarge, stable-v2.21.4)
Multi-language repository (ubuntu-latest, stable-v2.22.4)
Multi-language repository (macos-15-xlarge, stable-v2.22.4)
Multi-language repository (ubuntu-latest, stable-v2.23.9)
Multi-language repository (macos-latest-xlarge, stable-v2.23.9)
Multi-language repository (ubuntu-latest, stable-v2.24.3)
Multi-language repository (macos-latest-xlarge, stable-v2.24.3)
Multi-language repository (ubuntu-latest, default)
Multi-language repository (macos-latest-xlarge, default)
Multi-language repository (ubuntu-latest, linked)
Multi-language repository (macos-latest-xlarge, linked)
Multi-language repository (ubuntu-latest, nightly-latest)
Multi-language repository (macos-latest-xlarge, nightly-latest)
PR Check - Build mode autobuild
on: pull_request
10
Build mode autobuild (ubuntu-latest, linked)
Build mode autobuild (windows-latest, linked)
Build mode autobuild (ubuntu-latest, nightly-latest)
Build mode autobuild (windows-latest, nightly-latest)
PR Check - Bundle: From nightly
on: pull_request
2
Bundle: From nightly (ubuntu-latest, linked)
PR Check - Test different uses of `upload-sarif`
on: pull_request
26
Test different uses of `upload-sarif` (ubuntu-latest, default, code-scanning)
Test different uses of `upload-sarif` (ubuntu-latest, default, code-quality)
Test different uses of `upload-sarif` (ubuntu-latest, default, code-scanning,code-quality)
PR Check - Submit SARIF after failure
on: pull_request
9
Submit SARIF after failure (ubuntu-latest, linked)
Submit SARIF after failure (ubuntu-latest, default)
Submit SARIF after failure (ubuntu-latest, nightly-latest)
CodeQL action
on: pull_request
6
check-codeql-versions
analyze-other (actions)
analyze-javascript (ubuntu-22.04)
analyze-javascript (ubuntu-22.04, linked)
analyze-javascript (ubuntu-24.04)
analyze-javascript (ubuntu-24.04, linked)
analyze-javascript (windows-2022)
analyze-javascript (windows-2022, linked)
analyze-javascript (windows-2025)
analyze-javascript (windows-2025, linked)
analyze-javascript (macos-14-xlarge)
analyze-javascript (macos-14-xlarge, linked)
analyze-javascript (macos-15-xlarge)
analyze-javascript (macos-15-xlarge, linked)
PR Check - Go: Custom queries
on: pull_request
16
Go: Custom queries (ubuntu-latest, linked)
Go: Custom queries (ubuntu-latest, nightly-latest)
PR Check - Autobuild direct tracing (custom working directory)
on: pull_request
10
Autobuild direct tracing (custom working directory) (ubuntu-latest, linked)
Autobuild direct tracing (custom working directory) (windows-latest, linked)
Autobuild direct tracing (custom working directory) (ubuntu-latest, nightly-latest)
Autobuild direct tracing (custom working directory) (windows-latest, nightly-latest)
Test that the workaround for python 3.12 on windows works
on: pull_request
1
test-setup-python-scripts
PR Check - Autobuild working directory
on: pull_request
3
Autobuild working directory (ubuntu-latest, linked)
PR Check - Split workflow
on: pull_request
48
Split workflow (ubuntu-latest, linked)
Split workflow (macos-latest, linked)
Split workflow (ubuntu-latest, default)
Split workflow (macos-latest, default)
Split workflow (ubuntu-latest, nightly-latest)
Split workflow (macos-latest, nightly-latest)
Label PR with size
on: pull_request
1
Label PR with size
PR Check - C/C++: disabling autoinstalling dependencies (Linux)
on: pull_request
9
C/C++: disabling autoinstalling dependencies (Linux) (ubuntu-latest, linked)
C/C++: disabling autoinstalling dependencies (Linux) (ubuntu-latest, default)
C/C++: disabling autoinstalling dependencies (Linux) (ubuntu-latest, nightly-latest)
PR Check - Upload-sarif: 'ref' and 'sha' from inputs
on: pull_request
8
Upload-sarif: 'ref' and 'sha' from inputs (ubuntu-latest, default)
PR Check - Go: workaround for indirect tracing
on: pull_request
2
Go: workaround for indirect tracing (ubuntu-latest, default)
PR Check - Test unsetting environment variables
on: pull_request
18
Test unsetting environment variables (ubuntu-latest, linked)
Test unsetting environment variables (ubuntu-latest, nightly-latest)
PR Check - Resolve environment
on: pull_request
6
Resolve environment (ubuntu-latest, linked)
Resolve environment (ubuntu-latest, default)
Resolve environment (ubuntu-latest, nightly-latest)
PR Check - Go: tracing with autobuilder step
on: pull_request
29
Go: tracing with autobuilder step (ubuntu-latest, stable-v2.19.4)
Go: tracing with autobuilder step (ubuntu-latest, stable-v2.20.7)
Go: tracing with autobuilder step (ubuntu-latest, stable-v2.21.4)
Go: tracing with autobuilder step (ubuntu-latest, stable-v2.22.4)
Go: tracing with autobuilder step (ubuntu-latest, stable-v2.23.9)
Go: tracing with autobuilder step (ubuntu-latest, stable-v2.24.3)
Go: tracing with autobuilder step (ubuntu-latest, default)
Go: tracing with autobuilder step (ubuntu-latest, linked)
Go: tracing with autobuilder step (macos-latest, linked)
Go: tracing with autobuilder step (ubuntu-latest, nightly-latest)
Go: tracing with autobuilder step (macos-latest, nightly-latest)
PR Check - Analyze: 'ref' and 'sha' from inputs
on: pull_request
8
Analyze: 'ref' and 'sha' from inputs (ubuntu-latest, default)
Query filters tests
on: pull_request
7
Query Filters Tests
PR Check - Local CodeQL bundle
on: pull_request
9
Local CodeQL bundle (ubuntu-latest, linked)
PR Check - Overlay database init fallback
on: pull_request
4
Overlay database init fallback (ubuntu-latest, linked)
Overlay database init fallback (ubuntu-latest, nightly-latest)
PR Check - CodeQL Bundle All
on: pull_request
9
CodeQL Bundle All (ubuntu-latest, nightly-latest)
PR Check - Packaging: Download using registries
on: pull_request
15
Packaging: Download using registries (ubuntu-latest, default)
Packaging: Download using registries (ubuntu-latest, linked)
Packaging: Download using registries (ubuntu-latest, nightly-latest)
PR Check - Build mode rollback
on: pull_request
4
Build mode rollback (ubuntu-latest, nightly-latest)
PR Check - Swift analysis using autobuild
on: pull_request
2
Swift analysis using autobuild (macos-latest-xlarge, nightly-latest)
PR Check - Config input
on: pull_request
2
Config input (ubuntu-latest, linked)
PR Check - Go: diagnostic when Go is changed after init step
on: pull_request
4
Go: diagnostic when Go is changed after init step (ubuntu-latest, default)
PR Check - Build mode manual
on: pull_request
9
Build mode manual (ubuntu-latest, nightly-latest)
PR Check - Per-language bundles
on: pull_request
21
Per-language bundles (actions, ubuntu-latest, nightly-latest, actions javascript)
Per-language bundles (cpp, ubuntu-latest, nightly-latest, manual, gcc -o main main.c)
Per-language bundles (csharp, ubuntu-latest, nightly-latest, none)
Per-language bundles (go, ubuntu-latest, nightly-latest, autobuild)
Per-language bundles (java, ubuntu-latest, nightly-latest, none)
Per-language bundles (javascript, ubuntu-latest, nightly-latest)
Per-language bundles (python, ubuntu-latest, nightly-latest)
Per-language bundles (ruby, ubuntu-latest, nightly-latest)
Per-language bundles (rust, ubuntu-latest, nightly-latest)
Per-language bundles (swift, macos-latest-xlarge, nightly-latest, autobuild)
PR Check - Analysis kinds
on: pull_request
16
Analysis kinds (ubuntu-latest, linked, code-scanning)
Analysis kinds (ubuntu-latest, linked, code-quality)
Analysis kinds (ubuntu-latest, linked, code-scanning,code-quality)
Analysis kinds (ubuntu-latest, linked, risk-assessment)
Analysis kinds (ubuntu-latest, nightly-latest, code-scanning)
Analysis kinds (ubuntu-latest, nightly-latest, code-quality)
Analysis kinds (ubuntu-latest, nightly-latest, code-scanning,code-quality)
Analysis kinds (ubuntu-latest, nightly-latest, risk-assessment)
Code-Scanning config CLI tests
on: pull_request
6
Code Scanning Configuration tests (ubuntu-latest, linked)
Code Scanning Configuration tests (ubuntu-latest, default)
Code Scanning Configuration tests (ubuntu-latest, nightly-latest)
PR Check - Language aliases
on: pull_request
3
Language aliases (ubuntu-latest, linked)
PR Check - C/C++: autoinstalling dependencies is skipped (macOS)
on: pull_request
6
C/C++: autoinstalling dependencies is skipped (macOS) (macos-latest, linked)
C/C++: autoinstalling dependencies is skipped (macOS) (macos-latest, nightly-latest)
PR Check - autobuild-action
on: pull_request
38
autobuild-action (ubuntu-latest, linked)
autobuild-action (macos-latest, linked)
autobuild-action (windows-latest, linked)
PR Check - C/C++: autoinstalling dependencies (Linux)
on: pull_request
9
C/C++: autoinstalling dependencies (Linux) (ubuntu-latest, linked)
C/C++: autoinstalling dependencies (Linux) (ubuntu-latest, default)
C/C++: autoinstalling dependencies (Linux) (ubuntu-latest, nightly-latest)
PR Check - Job run UUID added to SARIF
on: pull_request
2
Job run UUID added to SARIF (ubuntu-latest, nightly-latest)
PR Check - Packaging: Action input
on: pull_request
24
Packaging: Action input (ubuntu-latest, linked)
Packaging: Action input (ubuntu-latest, default)
Packaging: Action input (ubuntu-latest, nightly-latest)
PR Check - RuboCop multi-language
on: pull_request
2
RuboCop multi-language (ubuntu-latest, default)
PR Check - Go: tracing with custom build steps
on: pull_request
29
Go: tracing with custom build steps (ubuntu-latest, stable-v2.19.4)
Go: tracing with custom build steps (ubuntu-latest, stable-v2.20.7)
Go: tracing with custom build steps (ubuntu-latest, stable-v2.21.4)
Go: tracing with custom build steps (ubuntu-latest, stable-v2.22.4)
Go: tracing with custom build steps (ubuntu-latest, stable-v2.23.9)
Go: tracing with custom build steps (ubuntu-latest, stable-v2.24.3)
Go: tracing with custom build steps (ubuntu-latest, default)
Go: tracing with custom build steps (ubuntu-latest, linked)
Go: tracing with custom build steps (macos-latest, linked)
Go: tracing with custom build steps (ubuntu-latest, nightly-latest)
Go: tracing with custom build steps (macos-latest, nightly-latest)
PR Check - Use a custom `checkout_path`
on: pull_request
9
Use a custom `checkout_path` (ubuntu-latest, linked)
PR Check - Go: diagnostic when `file` is not installed
on: pull_request
3
Go: diagnostic when `file` is not installed (ubuntu-latest, default)
PR Checks
on: pull_request
41
Unit Tests (ubuntu-latest, 20)
Unit Tests (ubuntu-latest, 24)
Unit Tests (macos-latest, 20)
Unit Tests (macos-latest, 24)
Unit Tests (windows-latest, 20)
Unit Tests (windows-latest, 24)
Other checks
Post repo size comment
PR Check - Packaging: Config and input passed to the CLI
on: pull_request
24
Packaging: Config and input passed to the CLI (ubuntu-latest, linked)
Packaging: Config and input passed to the CLI (ubuntu-latest, default)
Packaging: Config and input passed to the CLI (ubuntu-latest, nightly-latest)
PR Check - Clean up database cluster directory
on: pull_request
3
Clean up database cluster directory (ubuntu-latest, linked)
PR Check - Proxy test
on: pull_request
6
Proxy test (ubuntu-latest, linked)
Proxy test (ubuntu-latest, nightly-latest)
PR Check - Config export
on: pull_request
4
Config export (ubuntu-latest, linked)
Config export (ubuntu-latest, nightly-latest)
PR Check - Build mode none
on: pull_request
4
Build mode none (ubuntu-latest, linked)
Build mode none (ubuntu-latest, nightly-latest)
PR Check - Ruby analysis
on: pull_request
12
Ruby analysis (ubuntu-latest, linked)
Ruby analysis (macos-latest, linked)
Ruby analysis (ubuntu-latest, default)
Ruby analysis (macos-latest, default)
Ruby analysis (ubuntu-latest, nightly-latest)
Ruby analysis (macos-latest, nightly-latest)
PR Check - Export file baseline information
on: pull_request
26
Export file baseline information (ubuntu-latest, nightly-latest)
Export file baseline information (macos-latest, nightly-latest)
Export file baseline information (windows-latest, nightly-latest)
PR Check - Linux Arm64
on: pull_request
8
Linux Arm64 (ubuntu-24.04-arm, nightly-latest)
PR Check - Packaging: Config file
on: pull_request
24
Packaging: Config file (ubuntu-latest, linked)
Packaging: Config file (ubuntu-latest, default)
Packaging: Config file (ubuntu-latest, nightly-latest)
PR Check - Bundle: Caching checks
on: pull_request
5
Bundle: Caching checks (ubuntu-latest, linked)
Bundle: Caching checks (macos-latest, linked)
Bundle: Caching checks (windows-latest, linked)
PR Check - Bundle: From toolcache
on: pull_request
2
Bundle: From toolcache (ubuntu-latest, toolcache)
PR Check - Swift analysis using a custom build command
on: pull_request
24
Swift analysis using a custom build command (macos-latest-xlarge, linked)
Swift analysis using a custom build command (macos-latest-xlarge, default)
Swift analysis using a custom build command (macos-latest-xlarge, nightly-latest)
PR Check - Diagnostic export
on: pull_request
4
Diagnostic export (ubuntu-latest, linked)
Diagnostic export (ubuntu-latest, nightly-latest)
Code scanning results
CodeQL
ESLint
Select a check to view from the sidebar
Footer
© 2026 GitHub, Inc.
Footer navigation
Terms
Privacy
Security
Status
Community
Docs
Contact
You can’t perform that action at this time.
Back
|
FazBrowse Home
|
New Git URL