feat: broaden job matcher for semantic release

ossf · Sep 21, 2023 · 6f2fea1 · 6f2fea1
1 parent 0ce62a8
commit 6f2fea1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/checks/raw/permissions.go b/checks/raw/permissions.go
@@ -473,7 +473,7 @@ func isReleasingWorkflow(workflow *actionlint.Workflow, fp string, pdata *permis
 			// Commonly JavaScript packages, but supports multiple ecosystems
 			Steps: []*fileparser.JobMatcherStep{
 				{
-					Run: "npx.*semantic-release",
+					Run: "(npx|pnpm|yarn).*semantic-release",
 				},
 			},
 			LogText: "candidate publishing workflow using semantic-release",