generalize the file pattern for github/actions related YAML

erik-krogh · erik-krogh · commit fc6eedd07a34 · 2022-05-04T16:14:19.000+02:00
diff --git a/javascript/ql/lib/semmle/javascript/Actions.qll b/javascript/ql/lib/semmle/javascript/Actions.qll
@@ -16,7 +16,7 @@ module Actions {
       this.getLocation()
           .getFile()
           .getRelativePath()
-          .matches(["experimental/Security/CWE-094/.github/workflows/%", ".github/workflows/%"])
+          .regexpMatch("(^|.*/)\\.github/workflows/.*\\.yml$")
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,7 @@ module Actions {`
`16`	`16`	`this.getLocation()`
`17`	`17`	`.getFile()`
`18`	`18`	`.getRelativePath()`
`19`		`- .matches(["experimental/Security/CWE-094/.github/workflows/%", ".github/workflows/%"])`
	`19`	`+ .regexpMatch("(^\|./)\\.github/workflows/.\\.yml$")`
`20`	`20`	`}`
`21`	`21`	`}`
`22`	`22`