api

Aug 4, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jul 20, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jul 20, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 30, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 30, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 29, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ type License struct

+ Key string

+ Name string

type Repository

+ func CreateRepoTransformToV4(apiClient *Client, hostname string, method string, path string, body io.Reader) (*Repository, error)

Jun 29, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 29, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 18, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 17, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 17, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 3, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ type RequestedReviewer struct

+ Login string

+ Name string

+ Organization struct{ ... }

+ Slug string

+ TypeName string

+ func (r RequestedReviewer) LoginOrSlug() string

May 21, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

May 19, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

May 19, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

May 18, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ var RepositoryFields = []string

+ func RepositoryGraphQL(fields []string) string

+ func StatusCheckRollupGraphQL(after string) string

+ type CodeOfConduct struct

+ Key string

+ Name string

+ URL string

+ type CodingLanguage struct

+ Name string

+ type ContactLink struct

+ About string

+ Name string

+ URL string

+ type FundingLink struct

+ Platform string

+ URL string

+ type GitHubUser struct

+ ID string

+ Login string

+ Name string

type IssueLabel

+ Color string

+ Description string

+ ID string

+ type IssueTemplate struct

+ About string

+ Body string

+ Name string

+ Title string

type Milestone

+ Description string

+ DueOn *time.Time

+ Number int

+ type Owner struct

+ ID string

+ Login string

+ Name string

+ type PRRepository struct

+ ID string

+ Name string

type PullRequest

+ StatusCheckRollup struct{ ... }

+ type PullRequestCommit struct

+ Commit PullRequestCommitCommit

+ type PullRequestCommitCommit struct

+ AuthoredDate time.Time

+ Authors struct{ ... }

+ CommittedDate time.Time

+ MessageBody string

+ MessageHeadline string

+ OID string

+ type PullRequestTemplate struct

+ Body string

+ Filename string

type RepoProject

+ Number int

type Repository

+ AssignableUsers struct{ ... }

+ CodeOfConduct *CodeOfConduct

+ ContactLinks []ContactLink

+ DeleteBranchOnMerge bool

+ DiskUsage int

+ ForkCount int

+ FundingLinks []FundingLink

+ HasProjectsEnabled bool

+ HomepageURL string

+ IsArchived bool

+ IsBlankIssuesEnabled bool

+ IsEmpty bool

+ IsInOrganization bool

+ IsMirror bool

+ IsSecurityPolicyEnabled bool

+ IsTemplate bool

+ IsUserConfigurationRepository bool

+ IssueTemplates []IssueTemplate

+ Issues struct{ ... }

+ Labels struct{ ... }

+ Languages struct{ ... }

+ LatestRelease *RepositoryRelease

+ LicenseInfo *RepositoryLicense

+ MentionableUsers struct{ ... }

+ Milestones struct{ ... }

+ MirrorURL string

+ NameWithOwner string

+ OpenGraphImageURL string

+ PrimaryLanguage *CodingLanguage

+ Projects struct{ ... }

+ PullRequestTemplates []PullRequestTemplate

+ PullRequests struct{ ... }

+ PushedAt *time.Time

+ RepositoryTopics struct{ ... }

+ SSHURL string

+ SecurityPolicyURL string

+ StargazerCount int

+ TemplateRepository *Repository

+ UpdatedAt time.Time

+ UsesCustomOpenGraphImage bool

+ ViewerCanAdminister bool

+ ViewerDefaultCommitEmail string

+ ViewerDefaultMergeMethod string

+ ViewerHasStarred bool

+ ViewerPossibleCommitEmails []string

+ ViewerSubscription string

+ Watchers struct{ ... }

+ func (repo *Repository) ExportData(fields []string) *map[string]interface{}

+ type RepositoryLicense struct

+ Key string

+ Name string

+ Nickname string

type RepositoryOwner

+ ID string

+ type RepositoryRelease struct

+ Name string

+ PublishedAt time.Time

+ TagName string

+ URL string

+ type RepositoryTopic struct

+ Name string

Apr 20, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type PullRequest

+ func (pr PullRequest) IsOpen() bool

Apr 15, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Apr 15, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Apr 14, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ var IssueFields = []string

+ var PullRequestFields = append(IssueFields, "additions", "baseRefName", "changedFiles", "deletions", "files", ...)

+ func ExportIssues(issues []Issue, fields []string) *[]interface

+ func ExportPRs(prs []PullRequest, fields []string) *[]interface

+ func PullRequestGraphQL(fields []string) string

+ type Commit struct

+ OID string

type Issue

+ ClosedAt *time.Time

+ func (issue *Issue) ExportData(fields []string) *map[string]interface{}

+ type IssueStatusOptions struct

+ Fields []string

+ Username string

type PullRequest

+ ChangedFiles int

+ ClosedAt *time.Time

+ CreatedAt time.Time

+ Files struct{ ... }

+ MergeCommit *Commit

+ MergedAt *time.Time

+ MergedBy *Author

+ PotentialMergeCommit *Commit

+ UpdatedAt time.Time

+ func (pr *PullRequest) ExportData(fields []string) *map[string]interface{}

+ type PullRequestFile struct

+ Additions int

+ Deletions int

+ Path string

type PullRequestReview

+ SubmittedAt *time.Time

type PullRequestsPayload

+ func PullRequestStatus(client *Client, repo ghrepo.Interface, options StatusOptions) (*PullRequestsPayload, error)

type ReactionGroups

+ func (rg ReactionGroups) MarshalJSON() ([]byte, error)

+ type StatusOptions struct

+ CurrentPR int

+ Fields []string

+ HeadRef string

+ Username string

Apr 14, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Apr 2, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Mar 30, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type IssuesAndTotalCount

+ func IssueSearch(client *Client, repo ghrepo.Interface, searchQuery string, limit int) (*IssuesAndTotalCount, error)

type PullRequest

+ Additions int

+ Deletions int

Mar 4, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 23, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 18, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 17, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func IssueDelete(client *Client, repo ghrepo.Interface, issue Issue) error

+ func IssueUpdate(client *Client, repo ghrepo.Interface, params githubv4.UpdateIssueInput) error

+ func NewCachedClient(httpClient *http.Client, cacheTTL time.Duration) *http.Client

+ func ProjectNamesToPaths(client *Client, repo ghrepo.Interface, projectNames []string) ([]string, error)

+ func ProjectsToPaths(projects []RepoProject, names []string) ([]string, error)

+ func UpdatePullRequest(client *Client, repo ghrepo.Interface, params githubv4.UpdatePullRequestInput) error

+ func UpdatePullRequestReviews(client *Client, repo ghrepo.Interface, params githubv4.RequestReviewsInput) error

+ type Assignees struct

+ Nodes []struct{ ... }

+ TotalCount int

+ func (a Assignees) Logins() []string

type Client

+ func (c *Client) HTTP() *http.Client

type Comment

+ IsMinimized bool

+ MinimizedReason string

+ func (c Comment) HiddenReason() string

+ func (c Comment) IsHidden() bool

type HTTPError

+ Errors []HTTPErrorItem

+ type HTTPErrorItem struct

+ Code string

+ Field string

+ Message string

+ Resource string

+ type Labels struct

+ Nodes []struct{ ... }

+ TotalCount int

+ func (l Labels) Names() []string

+ type Milestone struct

+ Title string

+ type ProjectCards struct

+ Nodes []struct{ ... }

+ TotalCount int

+ func (p ProjectCards) ProjectNames() []string

type PullRequest

+ BaseRef struct{ ... }

+ MergeStateStatus string

type PullRequestReview

+ func (prr PullRequestReview) HiddenReason() string

+ func (prr PullRequestReview) IsHidden() bool

type RepoProject

+ ResourcePath string

+ func RepoAndOrgProjects(client *Client, repo ghrepo.Interface) ([]RepoProject, error)

type Repository

+ MergeCommitAllowed bool

+ RebaseMergeAllowed bool

+ SquashMergeAllowed bool

+ type ReviewRequests struct

+ Nodes []struct{ ... }

+ TotalCount int

+ func (r ReviewRequests) Logins() []string

Jan 22, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jan 21, 2021 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func CommentCreate(client *Client, repoHost string, params CommentCreateInput) (string, error)

type Comment

+ func (c Comment) Association() string

+ func (c Comment) AuthorLogin() string

+ func (c Comment) Content() string

+ func (c Comment) Created() time.Time

+ func (c Comment) IsEdited() bool

+ func (c Comment) Link() string

+ func (c Comment) Reactions() ReactionGroups

+ func (c Comment) Status() string

+ type CommentCreateInput struct

+ Body string

+ SubjectId string

type Issue

+ func (i Issue) Identifier() string

+ func (i Issue) Link() string

type PullRequest

+ func (pr *PullRequest) DisplayableReviews() PullRequestReviews

+ func (pr PullRequest) Identifier() string

+ func (pr PullRequest) Link() string

+ type PullRequestReview struct

+ Author Author

+ AuthorAssociation string

+ Body string

+ CreatedAt time.Time

+ IncludesCreatedEdit bool

+ ReactionGroups ReactionGroups

+ State string

+ URL string

+ func (prr PullRequestReview) Association() string

+ func (prr PullRequestReview) AuthorLogin() string

+ func (prr PullRequestReview) Content() string

+ func (prr PullRequestReview) Created() time.Time

+ func (prr PullRequestReview) IsEdited() bool

+ func (prr PullRequestReview) Link() string

+ func (prr PullRequestReview) Reactions() ReactionGroups

+ func (prr PullRequestReview) Status() string

+ type PullRequestReviews struct

+ Nodes []PullRequestReview

+ PageInfo PageInfo

+ TotalCount int

+ func ReviewsForPullRequest(client *Client, repo ghrepo.Interface, pr *PullRequest) (*PullRequestReviews, error)

Dec 15, 2020 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ type Author struct

+ Login string

+ type Comment struct

+ Author Author

+ AuthorAssociation string

+ Body string

+ CreatedAt time.Time

+ IncludesCreatedEdit bool

+ ReactionGroups ReactionGroups

+ type Comments struct

+ Nodes []Comment

+ PageInfo PageInfo

+ TotalCount int

+ func CommentsForIssue(client *Client, repo ghrepo.Interface, issue *Issue) (*Comments, error)

+ func CommentsForPullRequest(client *Client, repo ghrepo.Interface, pr *PullRequest) (*Comments, error)

type Issue

+ ReactionGroups ReactionGroups

+ type PageInfo struct

+ EndCursor string

+ HasNextPage bool

type PullRequest

+ Comments Comments

+ ReactionGroups ReactionGroups

+ type ReactionGroup struct

+ Content string

+ Users ReactionGroupUsers

+ func (rg ReactionGroup) Count() int

+ func (rg ReactionGroup) Emoji() string

+ type ReactionGroupUsers struct

+ TotalCount int

+ type ReactionGroups []ReactionGroup

type Repository

+ HasWikiEnabled bool

Dec 3, 2020 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type RepoMetadataResult

+ func (m *RepoMetadataResult) Merge(m2 *RepoMetadataResult)

Nov 24, 2020 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type ClientOption

+ func CacheResponse(ttl time.Duration, dir string) ClientOption

Nov 11, 2020 GO-2024-3269 +3 more

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Oct 27, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type MissingScopesError

+ MissingScopes []string

+ func (e MissingScopesError) Error() string

Oct 6, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type ClientOption

+ func CacheReponse(ttl time.Duration, dir string) ClientOption

Sep 16, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func CanPushToRepo(httpClient *http.Client, repo ghrepo.Interface) (bool, error)

+ func HandleHTTPError(resp *http.Response) error

type Repository

+ func RepoFindForks(client *Client, repo ghrepo.Interface, limit int) ([]*Repository, error)

Sep 8, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func CurrentUserID(client *Client, hostname string) (string, error)

+ type BranchRef struct

+ Name string

type Client

+ func (c Client) HasMinimumScopes(hostname string) error

+ type MissingScopesError struct

type RepoMilestone

+ func MilestoneByNumber(client *Client, repo ghrepo.Interface, number int) (*RepoMilestone, error)

+ func MilestoneByTitle(client *Client, repo ghrepo.Interface, title string) (*RepoMilestone, error)

Sep 3, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jul 28, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type Client

+ func NewClientFromHTTP(httpClient *http.Client) *Client

type HTTPError

+ OAuthScopes string

type NotFoundError

+ func (err *NotFoundError) Unwrap() error

type Repository

+ func InitRepoHostname(repo *Repository, hostname string) *Repository

Jul 16, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func RepoDefaultBranch(client *Client, repo ghrepo.Interface) (string, error)

+ type HTTPError struct

+ Message string

+ RequestURL *url.URL

+ StatusCode int

+ func (err HTTPError) Error() string

type Repository

+ func (r Repository) RepoHost() string

Jun 24, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jun 11, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func CurrentLoginName(client *Client) (string, error)

+ func NewHTTPClient(opts ...ClientOption) *http.Client

May 26, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func BranchDeleteRemote(client *Client, repo ghrepo.Interface, branch string) error

+ func PullRequestMerge(client *Client, repo ghrepo.Interface, pr *PullRequest, ...) error

+ func PullRequestReady(client *Client, repo ghrepo.Interface, pr *PullRequest) error

type Client

+ func (c Client) HasScopes(wantedScopes ...string) (bool, string, error)

+ func (c Client) PullRequestDiff(baseRepo ghrepo.Interface, prNum int) (string, error)

+ type Gist struct

+ Description string

+ Files map[GistFilename]GistFile

+ HTMLURL string

+ Public bool

+ func GistCreate(client *Client, description string, public bool, files map[string]string) (*Gist, error)

+ type GistFile struct

+ Content string

+ type GistFilename string

type PullRequest

+ Mergeable string

+ type PullRequestMergeMethod int

+ const PullRequestMergeMethodMerge

+ const PullRequestMergeMethodRebase

+ const PullRequestMergeMethodSquash

type RepoMetadataResult

+ func RepoResolveMetadataIDs(client *Client, repo ghrepo.Interface, input RepoResolveInput) (*RepoMetadataResult, error)

+ type RepoResolveInput struct

+ Assignees []string

+ Labels []string

+ Milestones []string

+ Projects []string

+ Reviewers []string

May 11, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

May 11, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func AddReview(client *Client, pr *PullRequest, input *PullRequestReviewInput) error

+ func IssueClose(client *Client, repo ghrepo.Interface, issue Issue) error

+ func IssueReopen(client *Client, repo ghrepo.Interface, issue Issue) error

+ func PullRequestClose(client *Client, repo ghrepo.Interface, pr *PullRequest) error

+ func PullRequestReopen(client *Client, repo ghrepo.Interface, pr *PullRequest) error

type ClientOption

+ func AddHeaderFunc(name string, value func() string) ClientOption

+ func CheckScopes(wantedScope string, cb func(string) error) ClientOption

type Issue

+ Closed bool

+ ID string

+ type IssuesDisabledError struct

+ type OrgTeam struct

+ ID string

+ Slug string

+ func OrganizationTeams(client *Client, owner string) ([]OrgTeam, error)

type PullRequest

+ Closed bool

+ ID string

+ type PullRequestReviewInput struct

+ Body string

+ State PullRequestReviewState

+ type PullRequestReviewState int

+ const ReviewApprove

+ const ReviewComment

+ const ReviewRequestChanges

type PullRequestsPayload

+ DefaultBranch string

+ type RepoAssignee struct

+ ID string

+ Login string

+ func RepoAssignableUsers(client *Client, repo ghrepo.Interface) ([]RepoAssignee, error)

+ type RepoLabel struct

+ ID string

+ Name string

+ func RepoLabels(client *Client, repo ghrepo.Interface) ([]RepoLabel, error)

+ type RepoMetadataInput struct

+ Assignees bool

+ Labels bool

+ Milestones bool

+ Projects bool

+ Reviewers bool

+ type RepoMetadataResult struct

+ AssignableUsers []RepoAssignee

+ Labels []RepoLabel

+ Milestones []RepoMilestone

+ Projects []RepoProject

+ Teams []OrgTeam

+ func RepoMetadata(client *Client, repo ghrepo.Interface, input RepoMetadataInput) (*RepoMetadataResult, error)

+ func (m *RepoMetadataResult) LabelsToIDs(names []string) ([]string, error)

+ func (m *RepoMetadataResult) MembersToIDs(names []string) ([]string, error)

+ func (m *RepoMetadataResult) MilestoneToID(title string) (string, error)

+ func (m *RepoMetadataResult) ProjectsToIDs(names []string) ([]string, error)

+ func (m *RepoMetadataResult) TeamsToIDs(names []string) ([]string, error)

+ type RepoMilestone struct

+ ID string

+ Title string

+ func RepoMilestones(client *Client, repo ghrepo.Interface) ([]RepoMilestone, error)

+ type RepoProject struct

+ ID string

+ Name string

+ func OrganizationProjects(client *Client, owner string) ([]RepoProject, error)

+ func RepoProjects(client *Client, repo ghrepo.Interface) ([]RepoProject, error)

type Repository

+ func (r Repository) ViewerCanTriage() bool

Apr 22, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type Issue

+ Assignees struct{ ... }

+ CreatedAt time.Time

+ Milestone struct{ ... }

+ ProjectCards struct{ ... }

type PullRequest

+ Assignees struct{ ... }

+ Labels struct{ ... }

+ Milestone struct{ ... }

+ ProjectCards struct{ ... }

+ ReviewRequests struct{ ... }

+ Reviews struct{ ... }

Apr 1, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type FakeHTTP

+ func (f *FakeHTTP) StubRepoResponseWithPermission(owner, repo, permission string)

Mar 31, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ func RepoParent(client *Client, repo ghrepo.Interface) (ghrepo.Interface, error)

+ func RepositoryReadme(client *Client, fullName string) (string, error)

type Repository

+ Description string

+ func RepoFindFork(client *Client, repo ghrepo.Interface) (*Repository, error)

Mar 18, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type RepoCreateInput

+ HomepageURL string

Mar 4, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Mar 3, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type FakeHTTP

+ func (f *FakeHTTP) StubForkedRepoResponse(forkFullName, parentFullName string)

+ func (f *FakeHTTP) StubWithFixture(status int, fixtureFileName string) func()

type PullRequest

+ IsDraft bool

type PullRequestsPayload

+ CurrentPRs []PullRequest

+ type RepoCreateInput struct

+ Description string

+ HasIssuesEnabled bool

+ HasWikiEnabled bool

+ Homepage string

+ Name string

+ OwnerID string

+ TeamID string

+ Visibility string

type Repository

+ CloneURL string

+ CreatedAt time.Time

+ URL string

+ func RepoCreate(client *Client, input RepoCreateInput) (*Repository, error)

Feb 20, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 20, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 15, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 13, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

type FakeHTTP

+ func (f *FakeHTTP) StubRepoResponse(owner, repo string)

Feb 13, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 6, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 4, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 4, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 4, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 4, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 4, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 3, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Feb 3, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jan 29, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jan 29, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jan 29, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jan 29, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Jan 28, 2020 GO-2022-0395 +4 more

  GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

  GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

  GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

  GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

  GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

Changes in this version

+ type Client struct

+ func NewClient(opts ...ClientOption) *Client

+ func (c Client) GraphQL(query string, variables map[string]interface{}, data interface{}) error

+ func (c Client) REST(method string, p string, body io.Reader, data interface{}) error

+ type ClientOption = func(http.RoundTripper) http.RoundTripper

+ func AddHeader(name, value string) ClientOption

+ func ReplaceTripper(tr http.RoundTripper) ClientOption

+ func VerboseLog(out io.Writer, logBodies bool) ClientOption

+ type FakeHTTP struct

+ Requests []*http.Request

+ func (f *FakeHTTP) RoundTrip(req *http.Request) (*http.Response, error)

+ func (f *FakeHTTP) StubResponse(status int, body io.Reader)

+ type GraphQLError struct

+ Message string

+ Path []string

+ Type string

+ type GraphQLErrorResponse struct

+ Errors []GraphQLError

+ func (gr GraphQLErrorResponse) Error() string

+ type Issue struct

+ Author struct{ ... }

+ Body string

+ Comments struct{ ... }

+ Labels struct{ ... }

+ Number int

+ State string

+ Title string

+ URL string

+ UpdatedAt time.Time

+ func IssueByNumber(client *Client, repo ghrepo.Interface, number int) (*Issue, error)

+ func IssueCreate(client *Client, repo *Repository, params map[string]interface{}) (*Issue, error)

+ func IssueList(client *Client, repo ghrepo.Interface, state string, labels []string, ...) ([]Issue, error)

+ type IssueLabel struct

+ Name string

+ type IssuesAndTotalCount struct

+ Issues []Issue

+ TotalCount int

+ type IssuesPayload struct

+ Assigned IssuesAndTotalCount

+ Authored IssuesAndTotalCount

+ Mentioned IssuesAndTotalCount

+ func IssueStatus(client *Client, repo ghrepo.Interface, currentUsername string) (*IssuesPayload, error)

+ type NotFoundError struct

+ type PullRequest struct

+ Author struct{ ... }

+ BaseRefName string

+ Body string

+ Commits struct{ ... }

+ HeadRefName string

+ HeadRepository struct{ ... }

+ HeadRepositoryOwner struct{ ... }

+ IsCrossRepository bool

+ MaintainerCanModify bool

+ Number int

+ ReviewDecision string

+ State string

+ Title string

+ URL string

+ func CreatePullRequest(client *Client, repo *Repository, params map[string]interface{}) (*PullRequest, error)

+ func PullRequestByNumber(client *Client, repo ghrepo.Interface, number int) (*PullRequest, error)

+ func PullRequestForBranch(client *Client, repo ghrepo.Interface, branch string) (*PullRequest, error)

+ func PullRequestList(client *Client, vars map[string]interface{}, limit int) ([]PullRequest, error)

+ func (pr *PullRequest) ChecksStatus() (summary PullRequestChecksStatus)

+ func (pr *PullRequest) ReviewStatus() PullRequestReviewStatus

+ func (pr PullRequest) HeadLabel() string

+ type PullRequestAndTotalCount struct

+ PullRequests []PullRequest

+ TotalCount int

+ type PullRequestChecksStatus struct

+ Failing int

+ Passing int

+ Pending int

+ Total int

+ type PullRequestReviewStatus struct

+ Approved bool

+ ChangesRequested bool

+ ReviewRequired bool

+ type PullRequestsPayload struct

+ CurrentPR *PullRequest

+ ReviewRequested PullRequestAndTotalCount

+ ViewerCreated PullRequestAndTotalCount

+ func PullRequests(client *Client, repo ghrepo.Interface, currentPRNumber int, ...) (*PullRequestsPayload, error)

+ type RepoNetworkResult struct

+ Repositories []*Repository

+ ViewerLogin string

+ func RepoNetwork(client *Client, repos []ghrepo.Interface) (RepoNetworkResult, error)

+ type Repository struct

+ DefaultBranchRef struct{ ... }

+ HasIssuesEnabled bool

+ ID string

+ IsPrivate bool

+ Name string

+ Owner RepositoryOwner

+ Parent *Repository

+ ViewerPermission string

+ func ForkRepo(client *Client, repo ghrepo.Interface) (*Repository, error)

+ func GitHubRepo(client *Client, repo ghrepo.Interface) (*Repository, error)

+ func (r Repository) IsFork() bool

+ func (r Repository) RepoName() string

+ func (r Repository) RepoOwner() string

+ func (r Repository) ViewerCanPush() bool

+ type RepositoryOwner struct

+ Login string