CodeQL library for GitHub Actions

codeql/actions-all 0.6.3 (changelog, source)

Module CodeInjectionQuery

Import path

import codeql.actions.security.CodeInjectionQuery

Imports

CachePoisoningQuery
ControlChecks
DataFlow	Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.
FlowSources

Predicates

criticalSeverityCodeInjection	Holds if there is a code injection flow from `source` to `sink` with critical severity, linked by `event`.
getRelevantCachePoisoningEventForSink	Get the relevant event for the sink in CachePoisoningViaCodeInjection.ql.
getRelevantCriticalEventForSink	Get the relevant event for the sink in CodeInjectionCritical.ql.
isGithubScriptUsingToJson	Holds if `expr` is the `script` input to `actions/github-script` and it uses `toJson`.
mediumSeverityCodeInjection	Holds if there is a code injection flow from `source` to `sink` with medium severity.

Classes

CodeInjectionSink

Aliases

CodeInjectionFlow

Tracks flow of unsafe user input that is used to construct and evaluate a code script.