Module UntrustedCheckoutQuery
Import path
import codeql.actions.security.UntrustedCheckoutQueryImports
Predicates
| checkoutReferenceEdge | Adds checkout-reference provenance before the checkout step in path queries. |
| checkoutTriggers | |
| containsHeadRef | |
| containsHeadSHA | |
| containsPullRequestNumber | |
| getCheckoutReference | Gets the expression that controls the untrusted checkout, if one can be identified. |
| getCheckoutReferenceText | Gets a display label for the expression that controls the untrusted checkout. |
Classes
| ActionsMutableRefCheckout | Checkout of a Pull Request HEAD ref using actions/checkout action |
| ActionsSHACheckout | Checkout of a Pull Request HEAD ref using actions/checkout action |
| GhMutableRefCheckout | Checkout of a Pull Request HEAD ref using gh within a Run step |
| GhSHACheckout | Checkout of a Pull Request HEAD ref using gh within a Run step |
| GitMutableRefCheckout | Checkout of a Pull Request HEAD ref using git within a Run step |
| GitSHACheckout | Checkout of a Pull Request HEAD ref using git within a Run step |
| MutableRefCheckoutStep | Checkout of a Pull Request HEAD ref |
| PRHeadCheckoutStep | Checkout of a Pull Request HEAD |
| SHACheckoutStep | Checkout of a Pull Request HEAD ref |
| SimplePRHeadCheckoutStep |
Aliases
| ActionsMutableRefCheckoutFlow | Constructs a global taint tracking computation. |
| ActionsSHACheckoutFlow | Constructs a global taint tracking computation. |