Skip to content

Commit 2a1226c

Browse files
author
Alvaro Muñoz
committed
Add workflow_dispatch to the triggers for artifact poisoning
1 parent 152d29d commit 2a1226c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ql/src/Security/CWE-829/ArtifactPoisoning.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ import codeql.actions.security.ArtifactPoisoningQuery
1616

1717
from LocalJob job, ArtifactDownloadStep download, Step run
1818
where
19-
job.getWorkflow().getATriggerEvent() = "workflow_run" and
19+
job.getWorkflow().getATriggerEvent() = ["workflow_run", "workflow_dispatch"] and
2020
(run instanceof Run or run instanceof UsesStep) and
2121
exists(int i, int j |
2222
job.getStep(i) = download and

0 commit comments

Comments
 (0)