|
|
|
|
@ -292,9 +292,9 @@ def lint(filename):
@@ -292,9 +292,9 @@ def lint(filename):
|
|
|
|
|
logging.info("Skipping local action in workflow.") |
|
|
|
|
break |
|
|
|
|
|
|
|
|
|
# If the step has a 'uses' key, check value hash. |
|
|
|
|
# If the step has a 'uses' key, check value hash, except bitwarden actions. |
|
|
|
|
if "bitwarden/gh-actions" not in path: |
|
|
|
|
try: |
|
|
|
|
|
|
|
|
|
# Check to make sure SHA1 hash is 40 characters. |
|
|
|
|
if len(hash) != 40: |
|
|
|
|
findings.append( |
|
|
|
|
|