CodeQL library for GitHub Actions
codeql/actions-all 0.4.27-dev (changelog, source)
Search

Class OutputClobberingFromFileReadSink

Holds if a Run step declares a step output variable with contents from a local file. e.g. run: | cat test-results/.vars >> $GITHUB_OUTPUT echo “sha=$(cat test-results/sha-number)” >> $GITHUB_OUTPUT echo “sha=$(<test-results/sha-number)” >> $GITHUB_OUTPUT

Import path

import codeql.actions.security.OutputClobberingQuery

Direct supertypes

Indirect supertypes

Inherited predicates

asExprfrom Node
getLocationfrom Node
hasLocationInfo

Holds if this element is at the specified location. The location spans column startcolumn of line startline to column endcolumn of line endline in file filepath. For more information, see Locations.

from Node
toString

Gets a textual representation of this element.

from Node

Charpred