mirror of
https://github.com/github/codeql.git
synced 2026-04-26 09:15:12 +02:00
13 lines
321 B
Plaintext
13 lines
321 B
Plaintext
/**
|
|
* @name Uses step with pinned SHA
|
|
* @description Finds 'uses' steps where the version is a pinned SHA.
|
|
* @id actions/examples/uses-pinned-sha
|
|
* @tags example
|
|
*/
|
|
|
|
import actions
|
|
|
|
from UsesStep uses
|
|
where uses.getVersion().regexpMatch("^[A-Fa-f0-9]{40}$")
|
|
select uses, "This 'uses' step has a pinned SHA version."
|