Skip to content

Commit 3652d6f

Browse files
authored
Merge pull request github#19127 from github/marcogario/untrusted_checkout_name
UntrustedCheckout: Try and differentiate between two versions of the query
2 parents 1ebce01 + 70150ee commit 3652d6f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name Checkout of untrusted code in trusted context
2+
* @name Checkout of untrusted code in a priviledged context
33
* @description Privileged workflows have read/write access to the base repository and access to secrets.
44
* By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
55
* that is able to push to the base repository and to access secrets.

0 commit comments

Comments
 (0)