Skip to content

workflows

853b8d1
Select commit
Loading
Failed to load commit list.
Open

unity-xcode-builder@v1.5.0 #29

workflows
853b8d1
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded May 18, 2026 in 2s

5 new alerts including 5 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 5 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 32 in .github/workflows/build.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build' step
Uses Step
uses 'buildalon/unity-setup' with ref 'main', not a pinned commit hash

Check warning on line 73 in .github/workflows/build.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build' step
Uses Step
uses 'buildalon/activate-unity-license' with ref 'main', not a pinned commit hash

Check warning on line 78 in .github/workflows/build.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build' step
Uses Step
uses 'buildalon/create-unity-project' with ref 'main', not a pinned commit hash

Check warning on line 86 in .github/workflows/build.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build' step
Uses Step
uses 'buildalon/unity-action' with ref 'main', not a pinned commit hash

Check warning on line 92 in .github/workflows/build.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build' step
Uses Step
uses 'buildalon/unity-action' with ref 'main', not a pinned commit hash