yunq Static Analysis

Version updated for https://github.com/pmaojo/yunq to version v0.3.0.

• This action is used across all versions by ? repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

The yunq action is a tool that provides static analysis and code quality checks in Rust. It automates the process of analyzing code before it reaches disk, ensuring that AI agents are judged by the same guardrail as the platform itself. The key capabilities include:

• Analyzing code written in multiple languages
• Ensuring compliance with coding standards and policies
• Providing real-time feedback on code quality and potential issues

What’s Changed

What’s Changed

• fix(secrets): ignore lockfiles, yaml, and css variables in high entropy rule by @pmaojo in https://github.com/pmaojo/yunq/pull/134
• fix(secrets): ignore lockfiles, yaml, and css variables in high entro… by @pmaojo in https://github.com/pmaojo/yunq/pull/135
• feat: advanced static analysis algorithms, A/A/A ratings, SARIF 2.1.0 exporter & React doctor rules by @pmaojo in https://github.com/pmaojo/yunq/pull/136
• feat(llm): add Google Gemini 3.5+ support & thought_signature preserv… by @pmaojo in https://github.com/pmaojo/yunq/pull/137
• feat(rules): Add owasp:insecure-file-permissions rule by @pmaojo in https://github.com/pmaojo/yunq/pull/139
• Feat/rulesets expansion and kickoff by @pmaojo in https://github.com/pmaojo/yunq/pull/140
• feat: add yunq MCP Server, Architecture Graph & Typeshare Rulesets, a… by @pmaojo in https://github.com/pmaojo/yunq/pull/141
• Feature/research gaps by @pmaojo in https://github.com/pmaojo/yunq/pull/142
• chore: Bump version to v0.3.0 by @pmaojo in https://github.com/pmaojo/yunq/pull/143

Full Changelog: https://github.com/pmaojo/yunq/compare/v0.2.1...v0.3.0

What’s Changed

• fix(secrets): ignore lockfiles, yaml, and css variables in high entropy rule by @pmaojo in https://github.com/pmaojo/yunq/pull/134
• fix(secrets): ignore lockfiles, yaml, and css variables in high entro… by @pmaojo in https://github.com/pmaojo/yunq/pull/135
• feat: advanced static analysis algorithms, A/A/A ratings, SARIF 2.1.0 exporter & React doctor rules by @pmaojo in https://github.com/pmaojo/yunq/pull/136
• feat(llm): add Google Gemini 3.5+ support & thought_signature preserv… by @pmaojo in https://github.com/pmaojo/yunq/pull/137
• feat(rules): Add owasp:insecure-file-permissions rule by @pmaojo in https://github.com/pmaojo/yunq/pull/139
• Feat/rulesets expansion and kickoff by @pmaojo in https://github.com/pmaojo/yunq/pull/140
• feat: add yunq MCP Server, Architecture Graph & Typeshare Rulesets, a… by @pmaojo in https://github.com/pmaojo/yunq/pull/141
• Feature/research gaps by @pmaojo in https://github.com/pmaojo/yunq/pull/142
• chore: Bump version to v0.3.0 by @pmaojo in https://github.com/pmaojo/yunq/pull/143

Full Changelog: https://github.com/pmaojo/yunq/compare/v0.2.1...v0.3.0

What’s Changed

• fix(secrets): ignore lockfiles, yaml, and css variables in high entropy rule by @pmaojo in https://github.com/pmaojo/yunq/pull/134
• fix(secrets): ignore lockfiles, yaml, and css variables in high entro… by @pmaojo in https://github.com/pmaojo/yunq/pull/135
• feat: advanced static analysis algorithms, A/A/A ratings, SARIF 2.1.0 exporter & React doctor rules by @pmaojo in https://github.com/pmaojo/yunq/pull/136
• feat(llm): add Google Gemini 3.5+ support & thought_signature preserv… by @pmaojo in https://github.com/pmaojo/yunq/pull/137
• feat(rules): Add owasp:insecure-file-permissions rule by @pmaojo in https://github.com/pmaojo/yunq/pull/139
• Feat/rulesets expansion and kickoff by @pmaojo in https://github.com/pmaojo/yunq/pull/140
• feat: add yunq MCP Server, Architecture Graph & Typeshare Rulesets, a… by @pmaojo in https://github.com/pmaojo/yunq/pull/141
• Feature/research gaps by @pmaojo in https://github.com/pmaojo/yunq/pull/142
• chore: Bump version to v0.3.0 by @pmaojo in https://github.com/pmaojo/yunq/pull/143

Full Changelog: https://github.com/pmaojo/yunq/compare/v0.2.1...v0.3.0

What’s Changed

• fix(secrets): ignore lockfiles, yaml, and css variables in high entropy rule by @pmaojo in https://github.com/pmaojo/yunq/pull/134
• fix(secrets): ignore lockfiles, yaml, and css variables in high entro… by @pmaojo in https://github.com/pmaojo/yunq/pull/135
• feat: advanced static analysis algorithms, A/A/A ratings, SARIF 2.1.0 exporter & React doctor rules by @pmaojo in https://github.com/pmaojo/yunq/pull/136
• feat(llm): add Google Gemini 3.5+ support & thought_signature preserv… by @pmaojo in https://github.com/pmaojo/yunq/pull/137
• feat(rules): Add owasp:insecure-file-permissions rule by @pmaojo in https://github.com/pmaojo/yunq/pull/139
• Feat/rulesets expansion and kickoff by @pmaojo in https://github.com/pmaojo/yunq/pull/140
• feat: add yunq MCP Server, Architecture Graph & Typeshare Rulesets, a… by @pmaojo in https://github.com/pmaojo/yunq/pull/141
• Feature/research gaps by @pmaojo in https://github.com/pmaojo/yunq/pull/142
• chore: Bump version to v0.3.0 by @pmaojo in https://github.com/pmaojo/yunq/pull/143

Full Changelog: https://github.com/pmaojo/yunq/compare/v0.2.1...v0.3.0

What’s Changed

• fix(secrets): ignore lockfiles, yaml, and css variables in high entropy rule by @pmaojo in https://github.com/pmaojo/yunq/pull/134
• fix(secrets): ignore lockfiles, yaml, and css variables in high entro… by @pmaojo in https://github.com/pmaojo/yunq/pull/135
• feat: advanced static analysis algorithms, A/A/A ratings, SARIF 2.1.0 exporter & React doctor rules by @pmaojo in https://github.com/pmaojo/yunq/pull/136
• feat(llm): add Google Gemini 3.5+ support & thought_signature preserv… by @pmaojo in https://github.com/pmaojo/yunq/pull/137
• feat(rules): Add owasp:insecure-file-permissions rule by @pmaojo in https://github.com/pmaojo/yunq/pull/139
• Feat/rulesets expansion and kickoff by @pmaojo in https://github.com/pmaojo/yunq/pull/140
• feat: add yunq MCP Server, Architecture Graph & Typeshare Rulesets, a… by @pmaojo in https://github.com/pmaojo/yunq/pull/141
• Feature/research gaps by @pmaojo in https://github.com/pmaojo/yunq/pull/142
• chore: Bump version to v0.3.0 by @pmaojo in https://github.com/pmaojo/yunq/pull/143

Full Changelog: https://github.com/pmaojo/yunq/compare/v0.2.1...v0.3.0

• Pmaojo
• GitHub Actions