Skip to content

PS-106 Verify NextJS Image Domains #1

PS-106 Verify NextJS Image Domains

PS-106 Verify NextJS Image Domains #1

# Ensure we do not allow all domains for image optimization,
# which will lead to an XSS security vulnerability.
name: NextJS Image Domain Check
on:
push:
branches:
- '**'
jobs:
call_nextjs_image_regex:
uses: magiclabs/gha-reusable-workflows/.github/workflows/forbidden_string_check.yml@master

Check failure on line 12 in .github/workflows/nextjs_image_domain_check.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/nextjs_image_domain_check.yml

Invalid workflow file

error parsing called workflow ".github/workflows/nextjs_image_domain_check.yml" -> "magiclabs/gha-reusable-workflows/.github/workflows/forbidden_string_check.yml@master" : workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
with:
file_extensions: '.js,.ts'
regex_pattern: "domains:\\s*\\[\\s*\\\"\\*\\\"\\s*\\]"