hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-14 17:31:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update regex for GitHub hosted runner matching

Browse Source 
Fixes false positives (of critical severity). New label naming conventions were introduced since the query was initially written.
This commit is contained in:
Jaroslav Lobačevski
2026-06-12 09:37:18 +03:00
committed by GitHub
parent ad18659373
commit 9078b511c6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
actions/ql/lib/codeql/actions/security/SelfHostedQuery.qll
View File

@@ -5,7 +5,7 @@ predicate isGithubHostedRunner(string runner) {
// list of github hosted repos: https://github.com/actions/runner-images/blob/main/README.md#available-images
runner
.toLowerCase()
.regexpMatch("^(ubuntu-([0-9.]+|latest)|macos-([0-9]+|latest)(-x?large)?|windows-([0-9.]+|latest))$")
.regexpMatch("^(ubuntu-([0-9.]+|latest)(-arm)?|macos-([0-9]+|latest)(-x?large|-intel)?|windows-([0-9.]+|latest)(-arm|-vs[0-9.]+)?)$")
}
bindingset[runner]