CodeQL library for GitHub Actions
codeql/actions-all 0.4.27-dev (changelog, source)
Search

Predicate untrustedGitCommandDataModel

Holds for git commands that may introduce untrusted data when called on an attacker controlled branch.

Import path

import codeql.actions.config.ConfigExtensions
predicate untrustedGitCommandDataModel(string cmd_regex, string flag)