diff --git a/rules/src/github-actions/publish-actions-cache-used.yaml b/rules/src/github-actions/publish-actions-cache-used.yaml index b11a24d..a753391 100644 --- a/rules/src/github-actions/publish-actions-cache-used.yaml +++ b/rules/src/github-actions/publish-actions-cache-used.yaml @@ -2,7 +2,7 @@ rules: - id: publish-actions-cache-used languages: - yaml - severity: ERROR + severity: WARNING metadata: tags: [security] shortDescription: Potential cache poisoning risk by using `actions/cache` in a publishing workflow.