forked from gm3dmo/the-power
-
Notifications
You must be signed in to change notification settings - Fork 0
/
create-commit-codeql-zipslip.json
8 lines (8 loc) · 3.2 KB
/
create-commit-codeql-zipslip.json
1
2
3
4
5
6
7
8
{
"message": "Add a codeql workflow file to report zipslip bug",
"committer": {
"name": "mona",
"email": "[email protected]"
},
"content": "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"
}