Skip to content

feat: accept x- extension keys in native documents and run the OMG PSSM 1.0 test suite - #697

Merged
fgmacedo merged 6 commits into
mainfrom
fgmacedo/uml-w1_suite
Oct 14, 2026
Merged

feat: accept x- extension keys in native documents and run the OMG PSSM 1.0 test suite#697
fgmacedo merged 6 commits into
mainfrom
fgmacedo/uml-w1_suite

test: run UML state machine cases generated from the OMG PSSM 1.0 tes…

be2614e
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / SonarCloud failed Oct 14, 2026 in 7s

6 new alerts including 1 high severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 high
  • 5 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 79 in .github/workflows/python-package.yml

See this annotation in the file changed.

Code scanning / SonarCloud

External GitHub Actions and workflows should be pinned to a commit hash High

Use full commit SHA hash for this dependency. See more on SonarQube Cloud

Check warning on line 84 in .github/workflows/python-package.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Python package manager scripts should not be executed during installation Medium

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 84 in .github/workflows/python-package.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Python dependencies should be locked to verified versions Medium

Using dependencies without locking resolved versions is security-sensitive. See more on SonarQube Cloud

Check warning on line 90 in .github/workflows/python-package.yml

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not enforcing HTTPS here might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 95 in .github/workflows/python-package.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Python package manager scripts should not be executed during installation Medium

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. See more on SonarQube Cloud

Check warning on line 95 in .github/workflows/python-package.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Python dependencies should be locked to verified versions Medium

Using dependencies without locking resolved versions is security-sensitive. See more on SonarQube Cloud