Merge pull request #542 from github/robertbrignull/import-actions-lib

adityasharad · web-flow · commit 1ec2fd7ea1ce · 2021-06-02T09:56:37.000-07:00
Update unguarded-action-lib.ql to catch uses of actions-util.ts
diff --git a/queries/unguarded-action-lib.ql b/queries/unguarded-action-lib.ql
@@ -43,7 +43,7 @@ class ActionsLibImport extends ImportDeclaration {
   ActionsLibImport() {
     getImportedPath().getValue().matches("@actions/%") and
     not isSafeActionLib(getImportedPath().getValue()) or
-    getImportedPath().getValue().matches("/actions-util$")
+    getImportedPath().getValue().matches("%/actions-util$")
   }
 
   string getName() {

Original file line number	Diff line number	Diff line change
`@@ -43,7 +43,7 @@ class ActionsLibImport extends ImportDeclaration {`
`43`	`43`	`ActionsLibImport() {`
`44`	`44`	`getImportedPath().getValue().matches("@actions/%") and`
`45`	`45`	`not isSafeActionLib(getImportedPath().getValue()) or`
`46`		`- getImportedPath().getValue().matches("/actions-util$")`
	`46`	`+ getImportedPath().getValue().matches("%/actions-util$")`
`47`	`47`	`}`
`48`	`48`
`49`	`49`	`string getName() {`