File tree Expand file tree Collapse file tree 1 file changed +1
-11
lines changed
actions/ql/src/Security/CWE-275 Expand file tree Collapse file tree 1 file changed +1
-11
lines changed Original file line number Diff line number Diff line change @@ -16,18 +16,8 @@ import actions
1616
1717Step stepInJob ( Job job ) { result = job .( LocalJob ) .getAStep ( ) }
1818
19- bindingset [ fullActionSelector]
20- string versionedAction ( string fullActionSelector ) {
21- result = fullActionSelector .substring ( 0 , fullActionSelector .indexOf ( "@" ) )
22- or
23- not exists ( fullActionSelector .indexOf ( "@" ) ) and
24- result = fullActionSelector
25- }
26-
27- string stepUses ( Step step ) { result = step .getUses ( ) .( ScalarValue ) .getValue ( ) }
28-
2919string jobNeedsPermission ( Job job ) {
30- actionsPermissionsDataModel ( versionedAction ( stepUses ( stepInJob ( job ) ) ) , result )
20+ actionsPermissionsDataModel ( stepInJob ( job ) . ( UsesStep ) . getCallee ( ) , result )
3121}
3222
3323/** Gets a suggestion for the minimal token permissions for `job`, as a JSON string. */
You can’t perform that action at this time.
0 commit comments