Holds if a Run step executes a command that returns untrusted data which flows to GITHUB_ENV e.g. run: | COMMIT_MESSAGE=$(git log –format=%s) echo “${COMMIT_MESSAGE}” >> $GITHUB_PATH
Import path
import codeql.actions.security.EnvPathInjectionQueryDirect supertypes
Inherited predicates
| asExpr | from Node | |
| getLocation | from Node | |
| hasLocationInfo | Holds if this element is at the specified location. The location spans column | from Node |
| toString | Gets a textual representation of this element. | from Node |