From bf411863585fbb0dd3b9fac37a63c76839f735a9 Mon Sep 17 00:00:00 2001 From: umbr4g3 <147834071+umbr4g3@users.noreply.github.com> Date: Fri, 12 Apr 2024 18:01:27 -0400 Subject: [PATCH 1/2] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 5f95a5e..732bf99 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,6 @@ # ActionsTOCTOU + This PoC contains code to monitor for an approval event (either a comment, label, or deployment environment approval) and then quickly replaces a file in the PR head with a local file specified as a parameter. This could be a script, an `action.yml` file, a `package.json` file. It really depends on the target workflow. From 06ab40664a9d0eda075e70b59385d3b12686b8e8 Mon Sep 17 00:00:00 2001 From: umbr4g3 <147834071+umbr4g3@users.noreply.github.com> Date: Fri, 12 Apr 2024 18:06:43 -0400 Subject: [PATCH 2/2] [skip ci] update --- deployment_example/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployment_example/package.json b/deployment_example/package.json index 8243583..9cefdea 100644 --- a/deployment_example/package.json +++ b/deployment_example/package.json @@ -8,7 +8,7 @@ "devDependencies": {}, "scripts": { "start": "node index.js", - "build": "echo \"Normal happy build\"!" + "build": "echo \"Evil build!\"!" }, "author": "", "license": "MIT"