Skip to content

Commit 279b0bb

Browse files
author
Alvaro Muñoz
committed
Change description for CWE-1395 query
1 parent 84b02fe commit 279b0bb

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

ql/src/Security/CWE-1395/UseOfKnownVulnerableAction.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
## Description
44

5-
The security of the workflow and the repository could be compromised by GitHub Actions workflows that utilize third-party GitHub Actions with known vulnerabilities.
5+
The security of the workflow and the repository could be compromised by GitHub Actions workflows that utilize GitHub Actions with known vulnerabilities.
66

77
## Recommendations
88

ql/src/Security/CWE-1395/UseOfKnownVulnerableAction.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* @name Use of known vulnerable 3rd party action.
3-
* @description The workflow is using a known vulnerable 3rd party action.
2+
* @name Use of a known vulnerable action.
3+
* @description The workflow is using an action with known vulnerabilities.
44
* @kind problem
55
* @problem.severity error
66
* @security-severity 7.5

0 commit comments

Comments
 (0)