Skip to content

Commit 84d4c57

Browse files
author
Alvaro Muñoz
committed
Merge branch 'toctou_refinements' of https://github.com/github/codeql-actions into toctou_refinements
2 parents 612be64 + c47fdd1 commit 84d4c57

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ import actions
1515
import codeql.actions.security.UntrustedCheckoutQuery
1616
import codeql.actions.security.PoisonableSteps
1717

18-
from ControlCheck check, MutableRefCheckoutStep checkout
18+
from LabelControlCheck check, MutableRefCheckoutStep checkout
1919
where
2020
// the mutable checkout step is protected by an access check
2121
check = [checkout.getIf(), checkout.getEnclosingJob().getIf()] and

ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ import actions
1515
import codeql.actions.security.UntrustedCheckoutQuery
1616
import codeql.actions.security.PoisonableSteps
1717

18-
from ControlCheck check, MutableRefCheckoutStep checkout
18+
from LabelControlCheck check, MutableRefCheckoutStep checkout
1919
where
2020
// the mutable checkout step is protected by an access check
2121
check = [checkout.getIf(), checkout.getEnclosingJob().getIf()] and

0 commit comments

Comments
 (0)