Skip to content

Commit 6f88ea2

Browse files
bjhargraverussellb
andauthored
Update docs/github-actions-use-policy.md
Place action name in back ticks. Co-authored-by: Russell Bryant <rbryant@redhat.com> Signed-off-by: BJ Hargrave <bj@hargrave.dev>
1 parent 13e603a commit 6f88ea2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/github-actions-use-policy.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -87,4 +87,4 @@ The report will also suggest modifications to the harden-runner action's configu
8787
```
8888

8989
Hardening the action runner like this can prevent malicious or misbehaving actions or the misuse of actions from exfiltrating secrets.
90-
The article [Harden-Runner Defends Against Arbitrary Command Execution in tj-actions/changed-files GitHub Action](https://www.stepsecurity.io/blog/defend-against-arbitrary-command-execution-in-tj-actions-changed-files) shows how the misuse of an action could allow an attacker with a well-crafted pull request to exfiltrate secrets.
90+
The article [Harden-Runner Defends Against Arbitrary Command Execution in `tj-actions/changed-files` GitHub Action](https://www.stepsecurity.io/blog/defend-against-arbitrary-command-execution-in-tj-actions-changed-files) shows how the misuse of an action could allow an attacker with a well-crafted pull request to exfiltrate secrets.

0 commit comments

Comments
 (0)