Skip to content

Commit 1ee5e18

Browse files
committed
add link to docs
1 parent faab427 commit 1ee5e18

1 file changed

Lines changed: 5 additions & 3 deletions

File tree

semgrep-rules/actions/pull_request_target_needs_exception.yaml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,13 +3,15 @@ rules:
33
languages:
44
- yaml
55
severity: ERROR
6-
message: pull_request_target is considered very risky and should only be used when strictly needed. Please prefer other triggers when possible. If you think this is needed, you can dismiss this alert and merge your PR.
6+
message: 'pull_request_target is considered very risky and should only be used when strictly needed. Please
7+
prefer other triggers when possible. If you think this is needed, you can dismiss this alert and
8+
merge your PR. More information: https://google.github.io/github-team/semgrep-rules/pull-request-target-needs-exception.html'
79
metadata:
810
category: best-practice
911
technology:
10-
- github-actions
12+
- github-actions
1113
patterns:
1214
- pattern-either:
1315
- patterns:
1416
- pattern-inside: "{on: ...}"
15-
- pattern: pull_request_target
17+
- pattern: pull_request_target

0 commit comments

Comments
 (0)