hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 13:15:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #50 from github/fix_typo

Browse Source 
fix typos
This commit is contained in:
Alvaro Muñoz
2024-06-27 11:56:03 +02:00
committed by GitHub
parent d11c15dc28 eeba26a647
commit c94b84685c
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
View File

@@ -1,6 +1,6 @@
/**
* @name Checkout of untrusted code in trusted context
* @description Priveleged workflows have read/write access to the base repository and access to secrets.
* @description Privileged workflows have read/write access to the base repository and access to secrets.
* By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
* that is able to push to the base repository and to access secrets.
* @kind path-problem

2
ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
View File

@@ -1,6 +1,6 @@
/**
* @name Checkout of untrusted code in trusted context
* @description Priveleged workflows have read/write access to the base repository and access to secrets.
* @description Privileged workflows have read/write access to the base repository and access to secrets.
* By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
* that is able to push to the base repository and to access secrets.
* @kind problem

2
ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
View File

@@ -1,6 +1,6 @@
/**
* @name Checkout of untrusted code in trusted context
* @description Priveleged workflows have read/write access to the base repository and access to secrets.
* @description Privileged workflows have read/write access to the base repository and access to secrets.
* By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
* that is able to push to the base repository and to access secrets.
* @kind problem