File tree Expand file tree Collapse file tree 1 file changed +1
-11
lines changed
actions/ql/src/Security/CWE-275 Expand file tree Collapse file tree 1 file changed +1
-11
lines changed Original file line number Diff line number Diff line change @@ -16,18 +16,8 @@ import actions
16
16
17
17
Step stepInJob ( Job job ) { result = job .( LocalJob ) .getAStep ( ) }
18
18
19
- bindingset [ fullActionSelector]
20
- string versionedAction ( string fullActionSelector ) {
21
- result = fullActionSelector .substring ( 0 , fullActionSelector .indexOf ( "@" ) )
22
- or
23
- not exists ( fullActionSelector .indexOf ( "@" ) ) and
24
- result = fullActionSelector
25
- }
26
-
27
- string stepUses ( Step step ) { result = step .getUses ( ) .( ScalarValue ) .getValue ( ) }
28
-
29
19
string jobNeedsPermission ( Job job ) {
30
- actionsPermissionsDataModel ( versionedAction ( stepUses ( stepInJob ( job ) ) ) , result )
20
+ actionsPermissionsDataModel ( stepInJob ( job ) . ( UsesStep ) . getCallee ( ) , result )
31
21
}
32
22
33
23
/** Gets a suggestion for the minimal token permissions for `job`, as a JSON string. */
You can’t perform that action at this time.
0 commit comments