CodeQL library for GitHub Actions
codeql/actions-all 0.4.27-dev (changelog, source)
Search

Predicate actionsSinkModel

MaD sinks Fields: - action: Fully-qualified action name (NWO) - version: Either ‘*’ or a specific SHA/Tag - input: sink node (prefixed with either env. or input.) - kind: sink kind - provenance: verification of the model

Import path

import codeql.actions.dataflow.ExternalFlow
predicate actionsSinkModel(string action, string version, string input, string kind, string provenance)