Merge pull request #2848 from geeknik/patch-35

Update github-workflows-disclosure.yaml
patch-1
Sandeep Singh 2021-10-08 19:08:20 +05:30 committed by GitHub
commit 1d75fef3b6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions

View File

@ -2,7 +2,7 @@ id: github-workflows-disclosure
info:
name: Github Workflow Disclosure
author: dhiyaneshDk
author: dhiyaneshDk,geeknik
severity: medium
reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/github-workflows-disclosure.json
tags: exposure,config
@ -31,6 +31,11 @@ requests:
- "{{BaseURL}}/.github/workflows/pr.yml"
- "{{BaseURL}}/.github/workflows/automerge.yml"
- "{{BaseURL}}/.github/workflows/docker.yml"
- "{{BaseURL}}/.github/workflows/ci-generated.yml"
- "{{BaseURL}}/.github/workflows/ci-push.yml"
- "{{BaseURL}}/.github/workflows/ci-daily.yml"
- "{{BaseURL}}/.github/workflows/ci-issues.yml"
- "{{BaseURL}}/.github/workflows/smoosh-status.yml"
matchers-condition: and
matchers: