We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 152d29d commit 2a1226cCopy full SHA for 2a1226c
ql/src/Security/CWE-829/ArtifactPoisoning.ql
@@ -16,7 +16,7 @@ import codeql.actions.security.ArtifactPoisoningQuery
16
17
from LocalJob job, ArtifactDownloadStep download, Step run
18
where
19
- job.getWorkflow().getATriggerEvent() = "workflow_run" and
+ job.getWorkflow().getATriggerEvent() = ["workflow_run", "workflow_dispatch"] and
20
(run instanceof Run or run instanceof UsesStep) and
21
exists(int i, int j |
22
job.getStep(i) = download and
0 commit comments