Skip to content

Commit 8578f92

Browse files
authored
Clarify expression hash input for CodeQL review (#67057)
1 parent fd5bf25 commit 8578f92

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

‎pkg/workflow/expression_extraction.go‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -419,6 +419,7 @@ func (e *ExpressionExtractor) generateEnvVarName(content string) string {
419419

420420
// Fall back to hash-based name for complex expressions
421421
// Use SHA256 hash to generate a unique identifier
422+
// content is unevaluated workflow expression source, not its runtime value; the digest is only an environment variable name.
422423
hash := sha256.Sum256([]byte(content))
423424
hashStr := hex.EncodeToString(hash[:])
424425

0 commit comments

Comments
 (0)