Browse Source

exempt bitwarden/gh-actions from hash check (#202)

pull/198/head
Opeyemi 2 years ago committed by GitHub
parent
commit
3308d10dd8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 4
      lint-workflow/lint.py

4
lint-workflow/lint.py

@ -292,9 +292,9 @@ def lint(filename): @@ -292,9 +292,9 @@ def lint(filename):
logging.info("Skipping local action in workflow.")
break
# If the step has a 'uses' key, check value hash.
# If the step has a 'uses' key, check value hash, except bitwarden actions.
if "bitwarden/gh-actions" not in path:
try:
# Check to make sure SHA1 hash is 40 characters.
if len(hash) != 40:
findings.append(

Loading…
Cancel
Save