robojerk/codeql-action

Use $RUNNER_TEMP for good measure

Browse source 
`runner.temp` is not user-controlled but we replace it with `$RUNNER_TEMP` in any case.
This commit is contained in:
Angela P Wen 2025-02-24 12:35:51 -08:00
parent 286fd68a67
commit c0a8eb9a67
1 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.github/actions/check-codescanning-config/action.yml vendored
View file

@ -62,13 +62,11 @@ runs:
- name: Check config - name: Check config
working-directory: ${{ github.action_path }} working-directory: ${{ github.action_path }}
shell: bash shell: bash
run: ts-node ./index.ts "${{ runner.temp }}/user-config.yaml" '$EXPECTED_CONFIG_FILE_CONTENTS' run: ts-node ./index.ts "$RUNNER_TEMP/user-config.yaml" '$EXPECTED_CONFIG_FILE_CONTENTS'
- name: Clean up - name: Clean up
shell: bash shell: bash
if: always() if: always()
run: | run: |
rm -rf ${{ runner.temp }}/codescanning-config-cli-test
rm -rf ${{ runner.temp }}/user-config.yaml
rm -rf $RUNNER_TEMP/codescanning-config-cli-test rm -rf $RUNNER_TEMP/codescanning-config-cli-test
rm -rf $RUNNER_TEMP/user-config.yaml rm -rf $RUNNER_TEMP/user-config.yaml