mirror of
https://github.com/github/codeql.git
synced 2026-04-23 07:45:17 +02:00
Actions: Add security-severity to excessive secrets exposure query
Same value as missing actions permissions, both providing warnings to follow the principle of least privilege within a workflow.
This commit is contained in:
@@ -3,6 +3,7 @@
|
||||
* @description All organization and repository secrets are passed to the workflow runner.
|
||||
* @kind problem
|
||||
* @precision high
|
||||
* @security-severity 5.0
|
||||
* @problem.severity warning
|
||||
* @id actions/excessive-secrets-exposure
|
||||
* @tags actions
|
||||
|
||||
Reference in New Issue
Block a user