Revert "Fix sentence and remove existing action comments (#2067)"

This reverts commit 830739d.

Author: varunsh-coder

.github/workflows/codeql.yml

@@ -43,7 +43,7 @@ jobs:
       - name: Harden Runner
         uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5
         with:
-          egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - name: Checkout repository
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b

.github/workflows/kbanalysis.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Harden Runner
         uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5
         with:
-          egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - uses: actions/checkout@d0651293c4a5a52e711f25b41b05b2212f385d28
         with:

remediation/workflow/hardenrunner/addaction.go

@@ -83,7 +83,7 @@ func addAction(inputYaml, jobName, action string) (string, error) {
 	output = append(output, spaces+fmt.Sprintf("- name: %s", HardenRunnerActionName))
 	output = append(output, spaces+fmt.Sprintf("  uses: %s", action))
 	output = append(output, spaces+"  with:")
-	output = append(output, spaces+"    egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs")
+	output = append(output, spaces+"    egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs")
 	output = append(output, "")
 
 	for i := jobNode.Line - 1; i < len(inputLines); i++ {

remediation/workflow/pin/pinactions.go

@@ -76,13 +76,6 @@ func PinAction(action, inputYaml string) (string, bool) {
 	pinnedAction := fmt.Sprintf("%s@%s # %s", leftOfAt[0], commitSHA, tagOrBranch)
 	updated = !strings.EqualFold(action, pinnedAction)
 	inputYaml = strings.ReplaceAll(inputYaml, action, pinnedAction)
-	stringParts := strings.SplitN(inputYaml, pinnedAction, 2)
-	if len(stringParts) > 1 {
-		trimmedString := strings.SplitN(stringParts[1], "\n", 2)
-		if len(trimmedString) > 1 {
-			inputYaml = stringParts[0] + pinnedAction + "\n" + trimmedString[1]
-		}
-	}
 	return inputYaml, updated
 }
 

remediation/workflow/pin/pinactions_test.go

@@ -182,7 +182,6 @@ func TestPinActions(t *testing.T) {
 		{fileName: "basic.yml", wantUpdated: true},
 		{fileName: "dockeraction.yml", wantUpdated: true},
 		{fileName: "multipleactions.yml", wantUpdated: true},
-		{fileName: "actionwithcomment.yml", wantUpdated: true},
 	}
 	for _, tt := range tests {
 		input, err := ioutil.ReadFile(path.Join(inputDirectory, tt.fileName))

testfiles/addaction/input/alreadypresent_2.yml

@@ -13,6 +13,6 @@ jobs:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
-         egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
      - run: ls -R

testfiles/addaction/output/2jobs.yml

@@ -8,7 +8,7 @@ jobs:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
-         egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
      - run: ls -R
   list-directory1:
@@ -17,6 +17,6 @@ jobs:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
-         egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
      - run: ls -R

testfiles/addaction/output/action-issues.yml

@@ -12,7 +12,7 @@ jobs:
     - name: Harden Runner
       uses: step-security/harden-runner@v2
       with:
-        egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+        egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
     - name: Close Issue
       uses: peter-evans/close-issue@v1

testfiles/addaction/output/alreadypresent.yml

@@ -13,6 +13,6 @@ jobs:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
-         egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
      - run: ls -R

testfiles/addaction/output/alreadypresent_2.yml

@@ -13,6 +13,6 @@ jobs:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
-         egress-policy: audit # TODO: change to 'egress-policy: block' after a couple of runs
+         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
      - run: ls -R