codeql/javascript/old-change-notes/2020-12-16-build-artifact-leak.md

lgtm,codescanning

• The js/build-artifact-leak query no longer reports when only a safe subset of the properties on process.env are included in a build-artifact.