Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Commit 5342cc7

Browse filesBrowse files
redsun82redsun82
authored
Merge pull request #21574 from github/redsun82/actions/remove-harden-runner-false-positive
Remove false positive injection sink models for `docker/build-push-action` and `step-security/harden-runner`
2 parents ee34e33 + e0bc18c commit 5342cc7
Copy full SHA for 5342cc7

3 files changed

+4-12Lines changed: 4 additions & 12 deletions

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md‎

Copy file name to clipboard
+4Lines changed: 4 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* Removed false positive injection sink models for the `context` input of `docker/build-push-action` and the `allowed-endpoints` input of `step-security/harden-runner`.
Collapse file

‎actions/ql/lib/ext/manual/docker_build-push-action.model.yml‎

Copy file name to clipboardExpand all lines: actions/ql/lib/ext/manual/docker_build-push-action.model.yml
-6Lines changed: 0 additions & 6 deletions
This file was deleted.
Collapse file

‎actions/ql/lib/ext/manual/step-security_harden-runner.model.yml‎

Copy file name to clipboardExpand all lines: actions/ql/lib/ext/manual/step-security_harden-runner.model.yml
-6Lines changed: 0 additions & 6 deletions
This file was deleted.

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.