A uses field within an Actions job step, which references an action as a reusable unit of code.
See https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#jobsjob_idstepsuses.
For example:
uses: actions/checkout@v2
Does not handle local repository references, e.g. .github/actions/action-name.
Import path
import semmle.javascript.ActionsDirect supertypes
Indirect supertypes
Fields
Predicates
| getGitHubRepository | Gets the owner and name of the repository where the Action comes from, e.g. |
| getStep | Gets the step this field belongs to. |
| getVersion | Gets the version reference used when checking out the Action, e.g. |
Inherited predicates
| eval | Gets the YAML value this node corresponds to after resolving aliases and includes. | from YamlNode |
| getAChild | Gets a child of this node, as a YAML value. | from YamlNode |
| getAChildNode | Gets a child node of this node. | from YamlNode |
| getAPrimaryQlClass | Gets the primary QL class for this node. | from YamlScalar |
| getAnchor | Gets the anchor associated with this node, if any. | from YamlNode |
| getChild | Gets the | from YamlNode |
| getChildNode | Gets the | from YamlNode |
| getDocument | Gets the toplevel document to which this node belongs. | from YamlNode |
| getFile | Gets the file this node comes from. | from YamlNode |
| getLocation | Gets the | from YamlNode |
| getNumChild | Gets the number of child nodes of this node. | from YamlNode |
| getParentNode | Gets the parent node of this node, which is always a collection. | from YamlNode |
| getStyle | Gets the style of this scalar, which is one of the following: | from YamlScalar |
| getTag | Gets the tag of this node. | from YamlNode |
| getValue | Gets the value of this scalar, as a string. | from YamlScalar |
| hasStandardTypeTag | Holds if this node is tagged with a standard type tag of the form | from YamlNode |
| toString | Gets a textual representation of this node. | from YamlNode |