Skip to content

Commit 3cdd641

Browse files
committed
actions: fix typo
1 parent 1ec3e87 commit 3cdd641

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,14 +26,14 @@ string versionedAction(string fullActionSelector) {
2626

2727
string stepUses(Step step) { result = step.getUses().(ScalarValue).getValue() }
2828

29-
string jobNeedsPersmission(Job job) {
29+
string jobNeedsPermission(Job job) {
3030
actionsPermissionsDataModel(versionedAction(stepUses(stepInJob(job))), result)
3131
}
3232

3333
/** Gets a suggestion for the minimal token permissions for `job`, as a JSON string. */
3434
string permissionsForJob(Job job) {
3535
result =
36-
"{" + concat(string permission | permission = jobNeedsPersmission(job) | permission, ", ") + "}"
36+
"{" + concat(string permission | permission = jobNeedsPermission(job) | permission, ", ") + "}"
3737
}
3838

3939
from Job job, string permissions
@@ -47,4 +47,5 @@ where
4747
) and
4848
permissions = permissionsForJob(job)
4949
select job,
50-
"Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: " + permissions
50+
"Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: "
51+
+ permissions

0 commit comments

Comments
 (0)