diff --git a/docs/github-actions-use-policy.md b/docs/github-actions-use-policy.md index 8ec19f24..2517f239 100644 --- a/docs/github-actions-use-policy.md +++ b/docs/github-actions-use-policy.md @@ -87,4 +87,4 @@ The report will also suggest modifications to the harden-runner action's configu ``` Hardening the action runner like this can prevent malicious or misbehaving actions or the misuse of actions from exfiltrating secrets. -The article [Harden-Runner Defends Against Arbitrary Command Execution in tj-actions/changed-files GitHub Action](https://www.stepsecurity.io/blog/defend-against-arbitrary-command-execution-in-tj-actions-changed-files) shows how the misuse of an action could allow an attacker with a well-crafted pull request to exfiltrate secrets. +The article [Harden-Runner Defends Against Arbitrary Command Execution in `tj-actions/changed-files` GitHub Action](https://www.stepsecurity.io/blog/defend-against-arbitrary-command-execution-in-tj-actions-changed-files) shows how the misuse of an action could allow an attacker with a well-crafted pull request to exfiltrate secrets.