Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Add machine-readable patch to fix script injections in workflows #4218

Merged
merged 32 commits into from
Nov 10, 2024

Merge branch 'main' into patch-dw

bcea7ed
Select commit
Loading
Failed to load commit list.
Merged

✨ Add machine-readable patch to fix script injections in workflows #4218

Merge branch 'main' into patch-dw
bcea7ed
Select commit
Loading
Failed to load commit list.
Codecov / codecov/patch succeeded Nov 10, 2024 in 1s

65.28% of diff hit (within 10.00% threshold of 66.80%)

View this Pull Request on Codecov

65.28% of diff hit (within 10.00% threshold of 66.80%)

Annotations

Check warning on line 144 in pkg/scorecard/scorecard.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

pkg/scorecard/scorecard.go#L143-L144 

Added lines #L143 - L144 were not covered by tests

Check warning on line 76 in probes/hasDangerousWorkflowScriptInjection/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/impl.go#L76 

Added line #L76 was not covered by tests

Check warning on line 89 in probes/hasDangerousWorkflowScriptInjection/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/impl.go#L88-L89 

Added lines #L88 - L89 were not covered by tests

Check warning on line 123 in probes/hasDangerousWorkflowScriptInjection/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/impl.go#L119-L123 

Added lines #L119 - L123 were not covered by tests

Check warning on line 125 in probes/hasDangerousWorkflowScriptInjection/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/impl.go#L125 

Added line #L125 was not covered by tests

Check warning on line 142 in probes/hasDangerousWorkflowScriptInjection/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/impl.go#L134-L142 

Added lines #L134 - L142 were not covered by tests

Check warning on line 56 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L47-L56 

Added lines #L47 - L56 were not covered by tests

Check warning on line 68 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L67-L68 

Added lines #L67 - L68 were not covered by tests

Check warning on line 73 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L72-L73 

Added lines #L72 - L73 were not covered by tests

Check warning on line 79 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L78-L79 

Added lines #L78 - L79 were not covered by tests

Check warning on line 87 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L85-L87 

Added lines #L85 - L87 were not covered by tests

Check warning on line 136 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L135-L136 

Added lines #L135 - L136 were not covered by tests

Check warning on line 172 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L171-L172 

Added lines #L171 - L172 were not covered by tests

Check warning on line 237 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L236-L237 

Added lines #L236 - L237 were not covered by tests

Check warning on line 251 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L250-L251 

Added lines #L250 - L251 were not covered by tests

Check warning on line 284 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L282-L284 

Added lines #L282 - L284 were not covered by tests

Check warning on line 316 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L315-L316 

Added lines #L315 - L316 were not covered by tests

Check warning on line 339 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L339 

Added line #L339 was not covered by tests

Check warning on line 352 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L352 

Added line #L352 was not covered by tests

Check warning on line 442 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L442 

Added line #L442 was not covered by tests

Check warning on line 462 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L461-L462 

Added lines #L461 - L462 were not covered by tests

Check warning on line 480 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L478-L480 

Added lines #L478 - L480 were not covered by tests

Check warning on line 493 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L491-L493 

Added lines #L491 - L493 were not covered by tests

Check warning on line 505 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L500-L505 

Added lines #L500 - L505 were not covered by tests

Check warning on line 511 in probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go

See this annotation in the file changed.

@codecov codecov / codecov/patch

probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go#L508-L511 

Added lines #L508 - L511 were not covered by tests
View more details on Codecov