Skip to content

Commit 6fd8aba

Browse files
committed
actions: simplify using existing UsesStep
1 parent ee1eb19 commit 6fd8aba

File tree

1 file changed

+1
-11
lines changed

1 file changed

+1
-11
lines changed

actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -16,18 +16,8 @@ import actions
1616

1717
Step stepInJob(Job job) { result = job.(LocalJob).getAStep() }
1818

19-
bindingset[fullActionSelector]
20-
string versionedAction(string fullActionSelector) {
21-
result = fullActionSelector.substring(0, fullActionSelector.indexOf("@"))
22-
or
23-
not exists(fullActionSelector.indexOf("@")) and
24-
result = fullActionSelector
25-
}
26-
27-
string stepUses(Step step) { result = step.getUses().(ScalarValue).getValue() }
28-
2919
string jobNeedsPermission(Job job) {
30-
actionsPermissionsDataModel(versionedAction(stepUses(stepInJob(job))), result)
20+
actionsPermissionsDataModel(stepInJob(job).(UsesStep).getCallee(), result)
3121
}
3222

3323
/** Gets a suggestion for the minimal token permissions for `job`, as a JSON string. */

0 commit comments

Comments
 (0)