Skip to content

Commit 6eb060f

Browse files
committed
Actions: Add security-severity to excessive secrets exposure query
Same value as missing actions permissions, both providing warnings to follow the principle of least privilege within a workflow.
1 parent 93fbb9f commit 6eb060f

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

actions/ql/src/Security/CWE-312/ExcessiveSecretsExposure.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
* @description All organization and repository secrets are passed to the workflow runner.
44
* @kind problem
55
* @precision high
6+
* @security-severity 5.0
67
* @problem.severity warning
78
* @id actions/excessive-secrets-exposure
89
* @tags actions

0 commit comments

Comments
 (0)