mirror of
https://github.com/github/codeql-action.git
synced 2025-12-24 08:10:06 +08:00
Apply realpathSync sooner
Fixes lint: https://github.com/github/codeql-action/pull/67/checks?check_run_id=777215812
This commit is contained in:
6
lib/config-utils.js
generated
6
lib/config-utils.js
generated
@@ -51,14 +51,14 @@ class Config {
|
|||||||
const localQueryPath = queryUses.slice(2);
|
const localQueryPath = queryUses.slice(2);
|
||||||
// Resolve the local path against the workspace so that when this is
|
// Resolve the local path against the workspace so that when this is
|
||||||
// passed to codeql it resolves to exactly the path we expect it to resolve to.
|
// passed to codeql it resolves to exactly the path we expect it to resolve to.
|
||||||
const workspacePath = util.getRequiredEnvParam('GITHUB_WORKSPACE');
|
const workspacePath = fs.realpathSync(util.getRequiredEnvParam('GITHUB_WORKSPACE'));
|
||||||
const absoluteQueryPath = path.join(workspacePath, localQueryPath);
|
const absoluteQueryPath = fs.realpathSync(path.join(workspacePath, localQueryPath));
|
||||||
// Check the file exists
|
// Check the file exists
|
||||||
if (!fs.existsSync(absoluteQueryPath)) {
|
if (!fs.existsSync(absoluteQueryPath)) {
|
||||||
throw new Error(getLocalPathDoesNotExist(configFile, localQueryPath));
|
throw new Error(getLocalPathDoesNotExist(configFile, localQueryPath));
|
||||||
}
|
}
|
||||||
// Check the local path doesn't jump outside the repo using '..' or symlinks
|
// Check the local path doesn't jump outside the repo using '..' or symlinks
|
||||||
if (!(fs.realpathSync(absoluteQueryPath) + path.sep).startsWith(fs.realpathSync(workspacePath) + path.sep)) {
|
if (!(absoluteQueryPath + path.sep).startsWith(workspacePath + path.sep)) {
|
||||||
throw new Error(getLocalPathOutsideOfRepository(configFile, localQueryPath));
|
throw new Error(getLocalPathOutsideOfRepository(configFile, localQueryPath));
|
||||||
}
|
}
|
||||||
this.additionalQueries.push(absoluteQueryPath);
|
this.additionalQueries.push(absoluteQueryPath);
|
||||||
|
|||||||
File diff suppressed because one or more lines are too long
@@ -51,8 +51,8 @@ export class Config {
|
|||||||
const localQueryPath = queryUses.slice(2);
|
const localQueryPath = queryUses.slice(2);
|
||||||
// Resolve the local path against the workspace so that when this is
|
// Resolve the local path against the workspace so that when this is
|
||||||
// passed to codeql it resolves to exactly the path we expect it to resolve to.
|
// passed to codeql it resolves to exactly the path we expect it to resolve to.
|
||||||
const workspacePath = util.getRequiredEnvParam('GITHUB_WORKSPACE');
|
const workspacePath = fs.realpathSync(util.getRequiredEnvParam('GITHUB_WORKSPACE'));
|
||||||
const absoluteQueryPath = path.join(workspacePath, localQueryPath);
|
const absoluteQueryPath = fs.realpathSync(path.join(workspacePath, localQueryPath));
|
||||||
|
|
||||||
// Check the file exists
|
// Check the file exists
|
||||||
if (!fs.existsSync(absoluteQueryPath)) {
|
if (!fs.existsSync(absoluteQueryPath)) {
|
||||||
@@ -60,7 +60,7 @@ export class Config {
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Check the local path doesn't jump outside the repo using '..' or symlinks
|
// Check the local path doesn't jump outside the repo using '..' or symlinks
|
||||||
if (!(fs.realpathSync(absoluteQueryPath) + path.sep).startsWith(fs.realpathSync(workspacePath) + path.sep)) {
|
if (!(absoluteQueryPath + path.sep).startsWith(workspacePath + path.sep)) {
|
||||||
throw new Error(getLocalPathOutsideOfRepository(configFile, localQueryPath));
|
throw new Error(getLocalPathOutsideOfRepository(configFile, localQueryPath));
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user