René's URL Explorer Experiment


Title: Improve proxy certificate generation by mbg · Pull Request #3473 · github/codeql-action · GitHub

Open Graph Title: Improve proxy certificate generation by mbg · Pull Request #3473 · github/codeql-action

X Title: Improve proxy certificate generation by mbg · Pull Request #3473 · github/codeql-action

Description: This PR modifies the generateCertificateAuthority function used by the start-proxy action to configure some additional properties that some validators may require of a CA certificate. Additionally, a specific digest is specified when signing the certificate to make this deterministic. The new behaviour is gated by a FF. Risk assessment For internal use only. Please select the risk level of this change: Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only. Which use cases does this change impact? Workflow types: Managed - Impacts users with dynamic workflows (Default Setup, CCR, ...). Products: Code Scanning - The changes impact analyses when analysis-kinds: code-scanning. Code Quality - The changes impact analyses when analysis-kinds: code-quality. Environments: Dotcom - Impacts CodeQL workflows on github.com and/or GitHub Enterprise Cloud with Data Residency. GHES - Impacts CodeQL workflows on GitHub Enterprise Server. How did/will you validate this change? Test repository - This change will be tested on a test repository before merging. Unit tests - I am depending on unit test coverage (i.e. tests in .test.ts files). End-to-end tests - I am depending on PR checks (i.e. tests in pr-checks). If something goes wrong after this change is released, what are the mitigation and rollback strategies? Feature flags - All new or changed code paths can be fully disabled with corresponding feature flags. How will you know if something goes wrong after this change is released? Telemetry - I rely on existing telemetry or have made changes to the telemetry. Dashboards - I will watch relevant dashboards for issues after the release. Consider whether this requires this change to be released at a particular time rather than as part of a regular release. Alerts - New or existing monitors will trip if something goes wrong with this change. Are there any special considerations for merging or releasing this change? No special considerations - This change can be merged at any time. Merge / deployment checklist Confirm this change is backwards compatible with existing workflows. Consider adding a changelog entry for this change. Confirm the readme and docs have been updated if necessary.

Open Graph Description: This PR modifies the generateCertificateAuthority function used by the start-proxy action to configure some additional properties that some validators may require of a CA certificate. Additionally,...

X Description: This PR modifies the generateCertificateAuthority function used by the start-proxy action to configure some additional properties that some validators may require of a CA certificate. Additionally,...

Opengraph URL: https://github.com/github/codeql-action/pull/3473

X: @github

direct link

Domain: redirect.github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:f2342405-0712-efd4-1585-0dc03691ad0e
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8660:53D51:83FDD8:B80503:6A4C9414
html-safe-noncecde4c2e96f2ae816a2a2926cce7495e88677b8f99418b1b370f1b37ed31f8542
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NjYwOjUzRDUxOjgzRkREODpCODA1MDM6NkE0Qzk0MTQiLCJ2aXNpdG9yX2lkIjoiNzc1MTQ2Mjk4MjI0NDkzMDU4MCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac49038adf9b41c8ae9503a1173a368619cdddcfdf5ba68b5f6a2dbb35ce2ff8ec
hovercard-subject-tagpull_request:3273179467
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/3473/files
twitter:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
og:image:altThis PR modifies the generateCertificateAuthority function used by the start-proxy action to configure some additional properties that some validators may require of a CA certificate. Additionally,...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql-action git https://github.com/github/codeql-action.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id259445878
octolytics-dimension-repository_nwogithub/codeql-action
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id259445878
octolytics-dimension-repository_network_root_nwogithub/codeql-action
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release7a2dede45637df6b92ddcfe2a557e67d4b5854ae
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://redirect.github.com/github/codeql-action/pull/3473/files#start-of-content
https://redirect.github.com/
Sign in https://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F3473%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F3473%2Ffiles
Sign up https://redirect.github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql-action
Reloadhttps://redirect.github.com/github/codeql-action/pull/3473/files
Reloadhttps://redirect.github.com/github/codeql-action/pull/3473/files
Reloadhttps://redirect.github.com/github/codeql-action/pull/3473/files
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
github https://redirect.github.com/github
codeql-actionhttps://redirect.github.com/github/codeql-action
Notifications https://redirect.github.com/login?return_to=%2Fgithub%2Fcodeql-action
Fork 470 https://redirect.github.com/login?return_to=%2Fgithub%2Fcodeql-action
Star 1.6k https://redirect.github.com/login?return_to=%2Fgithub%2Fcodeql-action
Code https://redirect.github.com/github/codeql-action
Issues 156 https://redirect.github.com/github/codeql-action/issues
Pull requests 27 https://redirect.github.com/github/codeql-action/pulls
Actions https://redirect.github.com/github/codeql-action/actions
Models https://redirect.github.com/github/codeql-action/models
Security and quality 2 https://redirect.github.com/github/codeql-action/security
Insights https://redirect.github.com/github/codeql-action/pulse
Code https://redirect.github.com/github/codeql-action
Issues https://redirect.github.com/github/codeql-action/issues
Pull requests https://redirect.github.com/github/codeql-action/pulls
Actions https://redirect.github.com/github/codeql-action/actions
Models https://redirect.github.com/github/codeql-action/models
Security and quality https://redirect.github.com/github/codeql-action/security
Insights https://redirect.github.com/github/codeql-action/pulse
Sign up for GitHub https://redirect.github.com/signup?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://redirect.github.com/login?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
mbghttps://redirect.github.com/mbg
mainhttps://redirect.github.com/github/codeql-action/tree/main
mbg/start-proxy/cert-genhttps://redirect.github.com/github/codeql-action/tree/mbg/start-proxy/cert-gen
Conversation 4 https://redirect.github.com/github/codeql-action/pull/3473
Findings https://redirect.github.com/github/codeql-action/pull/3473/findings
Commits 7 https://redirect.github.com/github/codeql-action/pull/3473/commits
Checks 250 https://redirect.github.com/github/codeql-action/pull/3473/checks
Files changed https://redirect.github.com/github/codeql-action/pull/3473/files
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
Improve proxy certificate generation https://redirect.github.com/github/codeql-action/pull/3473/files#top
Show all changes 7 commits https://redirect.github.com/github/codeql-action/pull/3473/files
713a293 Set `keyUsage` mbg Feb 10, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/713a293090d9603cde0a52b2916f5e1aa9e4e480
e8f0116 Explicitly sign certificate with SHA256 mbg Feb 10, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/e8f0116911d16c68812a60f320ef40d88680dee6
d155ebf Set more extensions mbg Feb 10, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/d155ebf27fb869781578c263f260dcb2f52b0aeb
d636fb3 Move certificate code to its own file mbg Feb 11, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/d636fb3f6389fb30043397cafe2dd0d19a297fea
b1d963e Gate updated cert gen behind FF mbg Feb 11, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/b1d963ed8fe199044952330e64cbf84c686b7d0a
7801eda Add some basic unit tests mbg Feb 11, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/7801eda17742a144024a9391ef1fa79e25a7fd23
bc1164e Fix typo in test mbg Feb 11, 2026 https://redirect.github.com/github/codeql-action/pull/3473/commits/bc1164e014587d7238a036a340d47b7549140779
Clear filters https://redirect.github.com/github/codeql-action/pull/3473/files
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
analyze-action-post.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-911c5662a35b2dddfb65aeded5d3fbb4305c867e2f8988eb1d75bee9208593ab
analyze-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-4926d6bcb92a4de805ceb8d280f31c24cffa2445b3a36cc658e5032a0910ed15
autobuild-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-850bbbd46e929f29c34c186fb38aebfc228803ab6191e6a668027042620c4f30
init-action-post.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-08750c194e36e3925a63362bbc1a7207690bd44add665b7c357e9d8b1861a4e6
init-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-bd9b22d62f144e71ae32a07c7c5151e30b31cd76d22303745df64c9886d81342
resolve-environment-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-46abfbca7ce31021720a31a005df69b4d2001e8f6211629198bd996ca1624d8b
setup-codeql-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-48a1e0d5f2fd249f221a7fcf67cd08518a435c0710722fa28b51fa40703e39ea
start-proxy-action-post.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-097051c7f12bb5167c369a2967376b55951a4d4d95b6f9dd4e0caf70fbd89dbf
start-proxy-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-9ef3265f6cc827943cc3edade4225dacb911ccb9d6891b38d0e744208d0dbe99
upload-lib.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-8ea2623264a4246323c551f1b018e163d8ea00c2fed5c4f4ead1c5b9d036cfd6
upload-sarif-action-post.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-83f37f8420ffb4c89a3f6a74854bdc504b93edd5e0f7dbd73772d8f8c1f4d11e
upload-sarif-action.js https://redirect.github.com/github/codeql-action/pull/3473/files#diff-5d3767541163ba07f1a1928ef585f505845a68d6a46a26fb68fa41e19786111b
feature-flags.ts https://redirect.github.com/github/codeql-action/pull/3473/files#diff-d6ca7464724b1fe6094ce0912d338e79983058d9acda8717c0469d40f1ae3dbd
start-proxy-action.ts https://redirect.github.com/github/codeql-action/pull/3473/files#diff-cd9fa9ce5ae4ab6ca00904ff3fe18f012544499a88d8d55659b17632b8da7d8a
ca.test.ts https://redirect.github.com/github/codeql-action/pull/3473/files#diff-df5b74ae4b8c82a8bbcc322297f8aeb7fa7ad340e0202b71c4eef676e7188347
ca.ts https://redirect.github.com/github/codeql-action/pull/3473/files#diff-25277468327c426ff472906ba4607d48213dc1ddd0e11b002b43b3e8d1e93d1f
types.ts https://redirect.github.com/github/codeql-action/pull/3473/files#diff-28cd91d3631eb555b15c046f30060b1fb102c354de7a3b373aae46e0d6f7d09f
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/analyze-action-post.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-911c5662a35b2dddfb65aeded5d3fbb4305c867e2f8988eb1d75bee9208593ab
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/analyze-action-post.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/analyze-action.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-4926d6bcb92a4de805ceb8d280f31c24cffa2445b3a36cc658e5032a0910ed15
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/analyze-action.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/autobuild-action.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-850bbbd46e929f29c34c186fb38aebfc228803ab6191e6a668027042620c4f30
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/autobuild-action.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/init-action-post.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-08750c194e36e3925a63362bbc1a7207690bd44add665b7c357e9d8b1861a4e6
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/init-action-post.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/init-action.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-bd9b22d62f144e71ae32a07c7c5151e30b31cd76d22303745df64c9886d81342
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/init-action.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/resolve-environment-action.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-46abfbca7ce31021720a31a005df69b4d2001e8f6211629198bd996ca1624d8b
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/resolve-environment-action.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/setup-codeql-action.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-48a1e0d5f2fd249f221a7fcf67cd08518a435c0710722fa28b51fa40703e39ea
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/setup-codeql-action.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://redirect.github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/start-proxy-action-post.jshttps://redirect.github.com/github/codeql-action/pull/3473/files#diff-097051c7f12bb5167c369a2967376b55951a4d4d95b6f9dd4e0caf70fbd89dbf
View file https://redirect.github.com/github/codeql-action/blob/bc1164e014587d7238a036a340d47b7549140779/lib/start-proxy-action-post.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
Please reload this pagehttps://redirect.github.com/github/codeql-action/pull/3473/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.