CodeQL library for GitHub Actions
codeql/actions-all 0.4.27-dev (changelog, source)
Search

Predicate Bash::envReachingGitHubFileWrite

Holds if the Run scripts contains an access to an environment variable called var which value may get appended to the GITHUB_XXX special file

Import path

import actions
predicate envReachingGitHubFileWrite(BashShellScript script, string var, string file_var, string field)