robojerk/codeql-action

Update unguarded-action-lib.ql

Browse source
This commit is contained in:
Robert 2021-06-02 16:51:30 +01:00 • committed by GitHub
parent 4ac9009dfe
commit 61b561867b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
queries/unguarded-action-lib.ql
View file

@ -43,7 +43,7 @@ class ActionsLibImport extends ImportDeclaration {
ActionsLibImport() { ActionsLibImport() {
getImportedPath().getValue().matches("@actions/%") and getImportedPath().getValue().matches("@actions/%") and
not isSafeActionLib(getImportedPath().getValue()) or not isSafeActionLib(getImportedPath().getValue()) or
getImportedPath().getValue().matches("/actions-util$") getImportedPath().getValue().matches("%/actions-util$")
} }
string getName() { string getName() {