| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:4747d97f-0daa-e7f8-12f4-da0a887b7205 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | B948:228A12:34FF19:474F79:6A4C71FA |
| html-safe-nonce | df45d2b155a86ba3fe7b332fed56b0de85410939ee1ccbc470669c3c1cf135cb |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCOTQ4OjIyOEExMjozNEZGMTk6NDc0Rjc5OjZBNEM3MUZBIiwidmlzaXRvcl9pZCI6IjE3NTQwNTIwOTU1NzUzNTU4OTgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | d5c9b99433ce52dfaaf81d9fe1435bd4750f2e6241a8d41ae1e99f7f3da9570c |
| hovercard-subject-tag | pull_request:3583968227 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///pull_requests/show/files |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/3850/files |
| twitter:image | https://avatars.githubusercontent.com/u/278086?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/278086?s=400&v=4 |
| og:image:alt | This PR primarily adds validation for Cloudsmith and GCP OIDC configurations, so that they can be correctly propagated to the authentication proxy for private package registries when given to the s... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/github/codeql-action git https://github.com/github/codeql-action.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 259445878 |
| octolytics-dimension-repository_nwo | github/codeql-action |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 259445878 |
| octolytics-dimension-repository_network_root_nwo | github/codeql-action |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 14099438da5379150f15a2892474c7c7e6c0e55e |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql-action/pull/3850/files#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F3850%2Ffiles |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F3850%2Ffiles |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql-action |
| Reload | https://github.com/github/codeql-action/pull/3850/files |
| Reload | https://github.com/github/codeql-action/pull/3850/files |
| Reload | https://github.com/github/codeql-action/pull/3850/files |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
|
github
| https://github.com/github |
| codeql-action | https://github.com/github/codeql-action |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql-action |
|
Fork
471
| https://github.com/login?return_to=%2Fgithub%2Fcodeql-action |
|
Star
1.6k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql-action |
|
Code
| https://github.com/github/codeql-action |
|
Issues
156
| https://github.com/github/codeql-action/issues |
|
Pull requests
27
| https://github.com/github/codeql-action/pulls |
|
Actions
| https://github.com/github/codeql-action/actions |
|
Models
| https://github.com/github/codeql-action/models |
|
Security and quality
2
| https://github.com/github/codeql-action/security |
|
Insights
| https://github.com/github/codeql-action/pulse |
|
Code
| https://github.com/github/codeql-action |
|
Issues
| https://github.com/github/codeql-action/issues |
|
Pull requests
| https://github.com/github/codeql-action/pulls |
|
Actions
| https://github.com/github/codeql-action/actions |
|
Models
| https://github.com/github/codeql-action/models |
|
Security and quality
| https://github.com/github/codeql-action/security |
|
Insights
| https://github.com/github/codeql-action/pulse |
| Sign up for GitHub
| https://github.com/signup?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose |
| terms of service | https://docs.github.com/terms |
| privacy statement | https://docs.github.com/privacy |
| Sign in | https://github.com/login?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose |
| mbg | https://github.com/mbg |
| main | https://github.com/github/codeql-action/tree/main |
| mbg/private-registry/cloudsmith-gcp | https://github.com/github/codeql-action/tree/mbg/private-registry/cloudsmith-gcp |
|
Conversation
25
| https://github.com/github/codeql-action/pull/3850 |
|
Findings
| https://github.com/github/codeql-action/pull/3850/findings |
|
Commits
20
| https://github.com/github/codeql-action/pull/3850/commits |
|
Checks
225
| https://github.com/github/codeql-action/pull/3850/checks |
|
Files changed
| https://github.com/github/codeql-action/pull/3850/files |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
|
Private registries: Add support for Cloudsmith and GCP OIDC configurations
| https://github.com/github/codeql-action/pull/3850/files#top |
|
Show all changes
20 commits
| https://github.com/github/codeql-action/pull/3850/files |
|
243c274
Add simple JSON schema / validation helpers
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/243c274daf79e2158519c66f93640001e92c4699 |
|
0752451
Use schema/validation for existing OIDC config types
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/0752451507238defe854c2172d7cc02170c52f46 |
|
c8e26e2
Move `getAuthConfig` out of `start-proxy.ts`
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/c8e26e209a72378c5f0d0c0baff9ed657148b087 |
|
bc4097b
Simplify credential cloning in `getAuthConfig`
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/bc4097bbe1e9ec5b32dd49b7267b4fed21fab02e |
|
d2a54a4
Add schemas for basic credential types
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/d2a54a45078101ba95470d15db11ab2e19d6e287 |
|
2acf819
Add tests for `getAuthConfig`
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/2acf81942be0e7e23680c9ea047cc9dc9154cc30 |
|
530fcb3
Group OIDC schemas into an array
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/530fcb3bbf6b4ec77dc7c4e7cd1ebcdeaef33be1 |
|
70b2658
Validate Cloudsmith OIDC configurations
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/70b2658d233375ecac06a6d4b53c197a2100688b |
|
4d2c7c6
Validate GCP OIDC configurations
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/4d2c7c6e1052d01b903f8c448040cca75475cb70 |
|
efdcb31
Accept `replaces-base` option
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/efdcb31f11520a0f75acffe6ab513bc602f26e8c |
|
0ed734b
Ignore test files
mbg Apr 25, 2026
| https://github.com/github/codeql-action/pull/3850/commits/0ed734b61b913e13c91e6dfe8bdb25eae59c2152 |
|
35715ef
Improve typing of `cloneCredential`
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/35715ef8fe7f093c67aee3ea68ab814037564120 |
|
91fbc51
Improve `validateSchema` comment
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/91fbc5160642c21a03107a9a66d2841d732e0ecd |
|
7a6ed56
Modify `FromSchema` so that optional properties are actually optional
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/7a6ed562193d7191bec9a0e1d3cd34b4cab3f10a |
|
549683c
Make it clearer what the expectations for `isUsernamePassword` are
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/549683cee56636703703eed41c1847ee23ee4463 |
|
b779832
Fix `permutations` comment
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/b77983290b283ad7a760a3981c5eb9da3ba05629 |
|
d1edf2e
Improve `replaces-base` validation and add tests
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/d1edf2e4deb7b62a55d69b57f06b7f158ce65b84 |
|
0a4d574
Add changelog entry
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/0a4d574ac47a8f8e488be5dcbbbbf207120f7bbe |
|
022ff3c
Merge remote-tracking branch 'origin/main' into mbg/private-registry/…
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/022ff3c73f1668d39b34166317b77ea3d14d0946 |
|
262a15f
Add generic non-printable chars test for OIDC configs
mbg Apr 30, 2026
| https://github.com/github/codeql-action/pull/3850/commits/262a15f6cf4c7a43d6a38ad76392e5e2d4977751 |
|
Clear filters
| https://github.com/github/codeql-action/pull/3850/files |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
|
codeql-config-javascript.yml
| https://github.com/github/codeql-action/pull/3850/files#diff-b95c0a95440bf27ee9160c5df1990b0b98305c827c26eed543258a3ddaf0623a |
|
CHANGELOG.md
| https://github.com/github/codeql-action/pull/3850/files#diff-06572a96a58dc510037d5efa622f9bec8519bc1beab13c9f251e97e657a9d4ed |
|
start-proxy-action.js
| https://github.com/github/codeql-action/pull/3850/files#diff-9ef3265f6cc827943cc3edade4225dacb911ccb9d6891b38d0e744208d0dbe99 |
|
index.test.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-587b7ebbb6df83f1fefac6fc6fb0e58bf2eddc560414ed578a316c631693078d |
|
index.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-bcb20dc6b5fd7e102cf1a28855c15ede5884e6b9cfe8ee117511b14081bec017 |
|
testing-util.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-eabf893cdbb0e0587b2d81f960a3d33a7beb8ecd6bf43bc4e612479e28071100 |
|
start-proxy-action.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-cd9fa9ce5ae4ab6ca00904ff3fe18f012544499a88d8d55659b17632b8da7d8a |
|
start-proxy.test.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-01b1815e9fb7bc72e2a49034f8d40ac9a9cee8eb1bafef7192ae1c78ec8bc456 |
|
start-proxy.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-2361fbfb0d573e13614a296f9a6689d35138bf65f3ec43543b7facd4cff4d415 |
|
types.test.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-b76a0a08a1299b53b316659473f175af95e01286da14c1b17c42588598403b5d |
|
types.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-28cd91d3631eb555b15c046f30060b1fb102c354de7a3b373aae46e0d6f7d09f |
|
validation.test.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-f4ae6445551720ca643b26e9754bd24c10e8f6900c45ba8a7e44de17596da56e |
|
validation.ts
| https://github.com/github/codeql-action/pull/3850/files#diff-840552e4ac4588aa2b7cd55647ccfd205085d37f3cbf9c5f3d26e35eb51fb229 |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| .github/codeql/codeql-config-javascript.yml | https://github.com/github/codeql-action/pull/3850/files#diff-b95c0a95440bf27ee9160c5df1990b0b98305c827c26eed543258a3ddaf0623a |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/.github/codeql/codeql-config-javascript.yml |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql-action/pull/3850/{{ revealButtonHref }} |
|
| https://github.com/github/codeql-action/pull/3850/files#diff-b95c0a95440bf27ee9160c5df1990b0b98305c827c26eed543258a3ddaf0623a |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| CHANGELOG.md | https://github.com/github/codeql-action/pull/3850/files#diff-06572a96a58dc510037d5efa622f9bec8519bc1beab13c9f251e97e657a9d4ed |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/CHANGELOG.md |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql-action/pull/3850/{{ revealButtonHref }} |
|
| https://github.com/github/codeql-action/pull/3850/files#diff-06572a96a58dc510037d5efa622f9bec8519bc1beab13c9f251e97e657a9d4ed |
|
| https://github.com/github/codeql-action/pull/3850/files#diff-06572a96a58dc510037d5efa622f9bec8519bc1beab13c9f251e97e657a9d4ed |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| lib/start-proxy-action.js | https://github.com/github/codeql-action/pull/3850/files#diff-9ef3265f6cc827943cc3edade4225dacb911ccb9d6891b38d0e744208d0dbe99 |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/lib/start-proxy-action.js |
|
Open in desktop
| https://desktop.github.com |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| src/json/index.test.ts | https://github.com/github/codeql-action/pull/3850/files#diff-587b7ebbb6df83f1fefac6fc6fb0e58bf2eddc560414ed578a316c631693078d |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/src/json/index.test.ts |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql-action/pull/3850/{{ revealButtonHref }} |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| src/json/index.ts | https://github.com/github/codeql-action/pull/3850/files#diff-bcb20dc6b5fd7e102cf1a28855c15ede5884e6b9cfe8ee117511b14081bec017 |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/src/json/index.ts |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql-action/pull/3850/{{ revealButtonHref }} |
|
| https://github.com/github/codeql-action/pull/3850/files#diff-bcb20dc6b5fd7e102cf1a28855c15ede5884e6b9cfe8ee117511b14081bec017 |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| src/json/testing-util.ts | https://github.com/github/codeql-action/pull/3850/files#diff-eabf893cdbb0e0587b2d81f960a3d33a7beb8ecd6bf43bc4e612479e28071100 |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/src/json/testing-util.ts |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql-action/pull/3850/{{ revealButtonHref }} |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
|
| https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1 |
| src/start-proxy-action.ts | https://github.com/github/codeql-action/pull/3850/files#diff-cd9fa9ce5ae4ab6ca00904ff3fe18f012544499a88d8d55659b17632b8da7d8a |
|
View file
| https://github.com/github/codeql-action/blob/262a15f6cf4c7a43d6a38ad76392e5e2d4977751/src/start-proxy-action.ts |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql-action/pull/3850/{{ revealButtonHref }} |
|
| https://github.com/github/codeql-action/pull/3850/files#diff-cd9fa9ce5ae4ab6ca00904ff3fe18f012544499a88d8d55659b17632b8da7d8a |
|
| https://github.com/github/codeql-action/pull/3850/files#diff-cd9fa9ce5ae4ab6ca00904ff3fe18f012544499a88d8d55659b17632b8da7d8a |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
| Please reload this page | https://github.com/github/codeql-action/pull/3850/files |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |