CodeQL library for GitHub Actions
codeql/actions-all 0.4.28 (changelog, source)
Search

Predicate envCtxLocalStep

Holds if there is a local flow step between a ${{}} expression accesing an env var and the var definition itself e.g. ${{ env.foo }}

Import path

import codeql.actions.dataflow.internal.DataFlowPrivate
predicate envCtxLocalStep(Node nodeFrom, Node nodeTo)