hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 21:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

remove octokit from trusted orgs for now - reduce PR scope

Browse Source
This commit is contained in:
Kylie Stradley
2024-10-24 16:27:53 -04:00
parent f8be8e768f
commit f716222801
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ql/src/Security/CWE-829/UnpinnedActionsTag.ql
View File

@@ -18,7 +18,7 @@ private predicate isPinnedCommit(string version) { version.regexpMatch("^[A-Fa-f
bindingset[repo]
private predicate isTrustedOrg(string repo) {
exists(string org | org in ["actions", "github", "advanced-security", "octokit"] | repo.matches(org + "/%"))
exists(string org | org in ["actions", "github", "advanced-security"] | repo.matches(org + "/%"))
}
from UsesStep uses, string repo, string version, Workflow workflow, string name