CodeQL library for GitHub Actions
codeql/actions-all 0.4.12 (changelog, source)
Search

Class EnvVarInjectionFromEnvVarSink

Holds if a Run step declares an environment variable, uses it to declare env var. e.g. env: BODY: ${{ github.event.comment.body }} run: | echo “FOO=$BODY” >> $GITHUB_ENV

Import path

import codeql.actions.security.EnvVarInjectionQuery

Direct supertypes

Indirect supertypes

Fields

Inherited predicates

asExprfrom Node
getLocationfrom Node
hasLocationInfo

Holds if this element is at the specified location. The location spans column startcolumn of line startline to column endcolumn of line endline in file filepath. For more information, see Locations.

from Node
toString

Gets a textual representation of this element.

from Node

Charpred