We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 979d604 commit f172332Copy full SHA for f172332
actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
@@ -24,7 +24,9 @@ private predicate isTrustedOwner(string nwo) {
24
}
25
26
bindingset[version]
27
-private predicate isPinnedContainer(string version) { version.regexpMatch("^sha256:[A-Fa-f0-9]{64}$") }
+private predicate isPinnedContainer(string version) {
28
+ version.regexpMatch("^sha256:[A-Fa-f0-9]{64}$")
29
+}
30
31
bindingset[nwo]
32
private predicate isContainerImage(string nwo) { nwo.regexpMatch("^docker://.+") }
0 commit comments