hackforla / hackforla/website

Resolve CodeQL Alert #32 - Generated by GHA

Open
#6,674 0 comments 0 reactions 0 assignees View on GitHub
Complexity: Missing Complexity: Small Dependency Feature: Code Alerts role: back end/devOps role: front end size: missing
Dominant language
JavaScript
Stars
363
Forks
872
Avg merge
2d 21h
Merged PRs (30d)
18

Description

### Dependency
- [ ] #6548
Explanation: it is likely that the alert is a false positive and will be resolved when CodeQL excludes liquid statements.

### Prerequisite

1. Be a member of Hack for LA. (There are no fees to join.) If you have not joined yet, please follow the steps on our [Getting Started page](https://www.hackforla.org/getting-started).
2. Before you claim or start working on an issue, please make sure you have read our [How to Contribute to Hack for LA Guide](https://github.com/hackforla/website/blob/7f0c132c96f71230b8935759e1f8711ccb340c0f/CONTRIBUTING.md).

### Overview
We need to resolve the new alert [(32)](https://github.com/hackforla/website/security/code-scanning/32) and either recommend dismissal of the alert or update the code files to resolve the alert.

### Action Items
- [ ] The following action item serves to "link" this issue as the "tracking issue" for the CodeQL alert and to provide more details regarding the alert: https://github.com/hackforla/website/security/code-scanning/32
- [ ] In a comment in this issue, add your analysis and recommendations. The recommendation can be one of the following: `dismiss as test`, `dismiss as false positive`, `dismiss as won't fix`, or `update code`. An example of a `false positive` is a report of a JavaScript syntax error that is caused by markdown or liquid symbols such as `---` or `{%`
- [ ] **If the recommendation is to dismiss the alert:**
- [ ] Apply the label `ready for dev lead`
- [ ] Move the issue to `Questions/In Review`
- [ ] **If the recommendation is to update code:**
- [ ] Create an issue branch and proceed with the code update
- [ ] Test using docker to ensure that there are no changes to any affected webpage(s)
- [ ] Proceed with pull request in the usual manner

### Resources/Instructions
- [HfLA website: CodeQL scan alert audits - issue 5005](https://docs.google.com/spreadsheets/d/1B3R-fI8OW0LcYuwZICQZ2fB8sjlE3VsfyGIXoReNBIs/edit#gid=193401043)
- [Code scanning results page](https://github.com/hackforla/website/security/code-scanning)
- [CodeQL query help for JavaScript](https://codeql.github.com/codeql-query-help/javascript/)
- [How to manage CodeQL alerts](https://github.com/hackforla/website/issues/6463#issuecomment-2002573270 )

This issue was automatically generated from the codeql.yml workflow

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.