Skip to content

Commit

Permalink
Update docs/github-actions-use-policy.md
Browse files Browse the repository at this point in the history
Place action name in back ticks.

Co-authored-by: Russell Bryant <[email protected]>
Signed-off-by: BJ Hargrave <[email protected]>
  • Loading branch information
bjhargrave and russellb authored May 20, 2024
1 parent 13e603a commit 6f88ea2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/github-actions-use-policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -87,4 +87,4 @@ The report will also suggest modifications to the harden-runner action's configu
```

Hardening the action runner like this can prevent malicious or misbehaving actions or the misuse of actions from exfiltrating secrets.
The article [Harden-Runner Defends Against Arbitrary Command Execution in tj-actions/changed-files GitHub Action](https://www.stepsecurity.io/blog/defend-against-arbitrary-command-execution-in-tj-actions-changed-files) shows how the misuse of an action could allow an attacker with a well-crafted pull request to exfiltrate secrets.
The article [Harden-Runner Defends Against Arbitrary Command Execution in `tj-actions/changed-files` GitHub Action](https://www.stepsecurity.io/blog/defend-against-arbitrary-command-execution-in-tj-actions-changed-files) shows how the misuse of an action could allow an attacker with a well-crafted pull request to exfiltrate secrets.

0 comments on commit 6f88ea2

Please sign in to comment.