Predicate actionsPermissionsDataModel
Holds if action needs permission to run.
- ‘action’ is the name of the action without any version information.
E.g. for the action selector
actions/checkout@v2,actionisactions/checkout. permissionis of the formscope-name: read|write, for examplecontents: read.- see https://github.com/actions/checkout?tab=readme-ov-file#recommended-permissions for an example of recommended permissions.
- see https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token for documentation of token permissions.
Import path
import codeql.actions.config.ConfigExtensionspredicate actionsPermissionsDataModel(string action, string permission)