Skip to content

Commit 03c3b3f

Browse files
committed
Improve wording of actions note
1 parent 019ec0c commit 03c3b3f

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

actions/ql/src/CHANGELOG.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
### Major Analysis Improvements
44

5-
* Fixed alert messages in `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` as they previously included a redundant placeholder in the alert message that would on occasion contain a long block of yml that makes the alert difficult to understand. Also clarify the wording to make it clear that it is not the artifact that is being poisoned, but instead a potentially untrusted artifact that is consumed. Also change the alert location to be the source, to align more with other queries reporting an artifact (e.g. zipslip) which is more useful.
5+
* Fixed alert messages in `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` as they previously included a redundant placeholder in the alert message that would on occasion contain a long block of yml that makes the alert difficult to understand. Also improved the wording to make it clearer that it is not the artifact that is being poisoned, but instead a potentially untrusted artifact that is consumed. Finally, changed the alert location to be the source, to align more with other queries reporting an artifact (e.g. zipslip) which is more useful.
66

77
### Minor Analysis Improvements
88

@@ -173,7 +173,7 @@ No user-facing changes.
173173
* `actions/if-expression-always-true/critical`
174174
* `actions/if-expression-always-true/high`
175175
* `actions/unnecessary-use-of-advanced-config`
176-
176+
177177
* The following query has been moved from the `code-scanning` suite to the `security-extended`
178178
suite. Any existing alerts for this query will be closed automatically unless the analysis is
179179
configured to use the `security-extended` suite.

actions/ql/src/change-notes/released/0.6.26.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
### Major Analysis Improvements
44

5-
* Fixed alert messages in `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` as they previously included a redundant placeholder in the alert message that would on occasion contain a long block of yml that makes the alert difficult to understand. Also clarify the wording to make it clear that it is not the artifact that is being poisoned, but instead a potentially untrusted artifact that is consumed. Also change the alert location to be the source, to align more with other queries reporting an artifact (e.g. zipslip) which is more useful.
5+
* Fixed alert messages in `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` as they previously included a redundant placeholder in the alert message that would on occasion contain a long block of yml that makes the alert difficult to understand. Also improved the wording to make it clearer that it is not the artifact that is being poisoned, but instead a potentially untrusted artifact that is consumed. Finally, changed the alert location to be the source, to align more with other queries reporting an artifact (e.g. zipslip) which is more useful.
66

77
### Minor Analysis Improvements
88

0 commit comments

Comments
 (0)