Predicate staticallyIdentifiedSelfHostedRunner
This predicate uses data available in the workflow file to identify self-hosted runners. It does not know if the repository is public or private. It is a best-effort approach to identify self-hosted runners.
Import path
import codeql.actions.security.SelfHostedQuerypredicate staticallyIdentifiedSelfHostedRunner(Job job)