From 6f2fea185111e152b98854ca4c0f89a186aedcef Mon Sep 17 00:00:00 2001
From: secustor <sebastian@poxhofer.at>
Date: Thu, 21 Sep 2023 11:33:15 +0200
Subject: [PATCH] feat: broaden job matcher for semantic release

---
 checks/raw/permissions.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/checks/raw/permissions.go b/checks/raw/permissions.go
index c80e45fdeab8..540fe4be223e 100644
--- a/checks/raw/permissions.go
+++ b/checks/raw/permissions.go
@@ -473,7 +473,7 @@ func isReleasingWorkflow(workflow *actionlint.Workflow, fp string, pdata *permis
 			// Commonly JavaScript packages, but supports multiple ecosystems
 			Steps: []*fileparser.JobMatcherStep{
 				{
-					Run: "npx.*semantic-release",
+					Run: "(npx|pnpm|yarn).*semantic-release",
 				},
 			},
 			LogText: "candidate publishing workflow using semantic-release",