We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b173785 commit 288fcb6Copy full SHA for 288fcb6
actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
@@ -1,5 +1,5 @@
1
/**
2
- * @name Checkout of untrusted code in trusted context with poisonable step
+ * @name Checkout of untrusted code in priviledged context
3
* @description Privileged workflows have read/write access to the base repository and access to secrets.
4
* By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
5
* that is able to push to the base repository and to access secrets.
0 commit comments