diff --git a/templates/insecure_triggers.erb b/templates/insecure_triggers.erb index 3fc1dea..1a7dd59 100644 --- a/templates/insecure_triggers.erb +++ b/templates/insecure_triggers.erb @@ -7,7 +7,7 @@ Branches with 'pull_request_target' in their workflows are not inherently dangerous. However, they should be reviewed to ensure security best practices. <% branches_with_pull_request_target.each do |entry| %> -* [<%= entry[:repo]%> (<%= entry[:branch] %>)](https://github.com/<%= entry[:repo] %><%= entry[:branch] %>) +* [<%= entry[:repo]%> (<%= entry[:branch] %>)](https://github.com/<%= entry[:repo] %>/tree/<%= entry[:branch] %>) <% end %> <% end %> @@ -27,4 +27,4 @@ Files with 'pull_request_target' in their workflows are not inherently dangerous --- -Created at: <%= Time.now %> \ No newline at end of file +Created at: <%= Time.now %>