Skip to content

Commit b204603

Browse files
Copilotoscarsj
andauthored
Update UnpinnedActionsTag query metadata scope
Agent-Logs-Url: https://github.com/github/codeql/sessions/5425ff86-b998-4c7b-9447-52c8ae74a7a2 Co-authored-by: oscarsj <1410188+oscarsj@users.noreply.github.com>
1 parent ca68274 commit b204603

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name Unpinned tag for a non-immutable Action in workflow
2+
* @name Unpinned tag for a non-immutable Action in workflow or composite action
33
* @description Using a tag for a non-immutable Action that is not pinned to a commit can lead to executing an untrusted Action through a supply chain attack.
44
* @kind problem
55
* @security-severity 5.0

0 commit comments

Comments
 (0)