hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-19 22:14:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Re-order conditions

Browse Source 
Makes for a neater diff.
This commit is contained in:
martincostello
2025-02-14 13:35:20 +00:00
parent 99bb0f0b4f
commit 9a7ed7f3f7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
View File

@@ -40,8 +40,8 @@ where
) and
uses.getVersion() = version and
not isTrustedOwner(nwo) and
not isImmutableAction(uses, nwo) and
not if isContainerImage(nwo) then isPinnedContainer(version) else isPinnedCommit(version)
not isImmutableAction(uses, nwo) and
select uses.getCalleeNode(),
"Unpinned 3rd party Action '" + name + "' step $@ uses '" + nwo + "' with ref '" + version +
"', not a pinned commit hash", uses, uses.toString()