Merge pull request #542 from github/robertbrignull/import-actions-lib

Update unguarded-action-lib.ql to catch uses of actions-util.ts
github · Jun 2, 2021 · 1ec2fd7 · 1ec2fd7
2 parents 4ac9009 + 61b5618
commit 1ec2fd7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/queries/unguarded-action-lib.ql b/queries/unguarded-action-lib.ql
@@ -43,7 +43,7 @@ class ActionsLibImport extends ImportDeclaration {
   ActionsLibImport() {
     getImportedPath().getValue().matches("@actions/%") and
     not isSafeActionLib(getImportedPath().getValue()) or
-    getImportedPath().getValue().matches("/actions-util$")
+    getImportedPath().getValue().matches("%/actions-util$")
   }
 
   string getName() {