hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update precision and severity for unpinned-tag

Browse Source 
This ensures that it will be in `security-extended`, but not the default suite.
This commit is contained in:
Dave Bartolomeo
2025-02-06 11:33:17 -05:00
parent 81ff4dd81c
commit 74619d49b3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
View File

@@ -3,8 +3,8 @@
* @description Using a tag for a non-immutable Action that is not pinned to a commit can lead to executing an untrusted Action through a supply chain attack.
* @kind problem
* @security-severity 5.0
* @problem.severity recommendation
* @precision high
* @problem.severity warning
* @precision medium
* @id actions/unpinned-tag
* @tags security
* actions