robojerk/codeql-action

Merge pull request #542 from github/robertbrignull/import-actions-lib

Browse source 
Update unguarded-action-lib.ql to catch uses of actions-util.ts
This commit is contained in:
Aditya Sharad 2021-06-02 09:56:37 -07:00 • committed by GitHub
commit 1ec2fd7ea1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
queries/unguarded-action-lib.ql
View file

@ -43,7 +43,7 @@ class ActionsLibImport extends ImportDeclaration {
ActionsLibImport() {
getImportedPath().getValue().matches("@actions/%") and
not isSafeActionLib(getImportedPath().getValue()) or
getImportedPath().getValue().matches("/actions-util$")
getImportedPath().getValue().matches("%/actions-util$")
}
string getName() {