hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-03 09:40:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

recommend to add octokit to trusted orgs

Browse Source
This commit is contained in:
Kylie Stradley
2024-10-17 15:59:45 -04:00
parent 6bf3eb79a9
commit 325727ed6d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ql/src/Security/CWE-829/UnpinnedActionsTag.ql
View File

@@ -18,7 +18,7 @@ private predicate isPinnedCommit(string version) { version.regexpMatch("^[A-Fa-f
bindingset[repo]
private predicate isTrustedOrg(string repo) {
exists(string org | org in ["actions", "github", "advanced-security"] | repo.matches(org + "/%"))
exists(string org | org in ["actions", "github", "advanced-security", "octokit"] | repo.matches(org + "/%"))
}
from UsesStep uses, string repo, string version, Workflow workflow, string name