Skip to content

Commit 7a1369d

Browse files
author
Alvaro Muñoz
authored
Merge pull request #19 from GitHubSecurityLab/steps
2 parents d6f6e1f + 9e2be7d commit 7a1369d

File tree

39 files changed

+248
-1
lines changed

39 files changed

+248
-1
lines changed

‎ql/lib/ext/akhileshns_heroku-deploy.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["akhileshns/heroku-deploy", "*", "input.branch", "output.status", "taint"]

‎ql/lib/ext/android-actions_setup-android.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["android-actions/setup-android", "*", "input.cmdline-tools-version", "output.ANDROID_COMMANDLINE_TOOLS_VERSION", "taint"]

‎ql/lib/ext/apple-actions_import-codesign-certs.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["apple-actions/import-codesign-certs", "*", "input.keychain-password", "output.keychain-password", "taint"]

‎ql/lib/ext/ashley-taylor_read-json-property-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["ashley-taylor/read-json-property-action", "*", "input.json", "output.value", "taint"]

‎ql/lib/ext/ashley-taylor_regex-property-action.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["ashley-taylor/regex-property-action", "*", "input.replacement", "output.value", "taint"]
7+
- ["ashley-taylor/regex-property-action", "*", "input.value", "output.value", "taint"]

‎ql/lib/ext/aszc_change-string-case-action.model.yml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["aszc/change-string-case-action", "*", "input.string", "output.capitalized", "taint"]
7+
- ["aszc/change-string-case-action", "*", "input.replace-with", "output.uppercase", "taint"]
8+
- ["aszc/change-string-case-action", "*", "input.replace-with", "output.lowercase", "taint"]

‎ql/lib/ext/aws-actions_configure-aws-credentials.model.yml

+11
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["aws-actions/configure-aws-credentials", "*", "input.aws-access-key-id", "env.AWS_ACCESS_KEY_ID", "taint"]
7+
- ["aws-actions/configure-aws-credentials", "*", "input.aws-access-key-id", "secret.AWS_ACCESS_KEY_ID", "taint"]
8+
- ["aws-actions/configure-aws-credentials", "*", "input.aws-secret-access-key", "env.AWS_SECRET_ACCESS_KEY", "taint"]
9+
- ["aws-actions/configure-aws-credentials", "*", "input.aws-secret-access-key", "secret.AWS_SECRET_ACCESS_KEY", "taint"]
10+
- ["aws-actions/configure-aws-credentials", "*", "input.aws-session-token", "env.AWS_SESSION_TOKEN", "taint"]
11+
- ["aws-actions/configure-aws-credentials", "*", "input.aws-session-token", "secret.AWS_SESSION_TOKEN", "taint"]

‎ql/lib/ext/bobheadxi_deployments.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["bobheadxi/deployments", "*", "input.env", "output.env", "taint"]

‎ql/lib/ext/bufbuild_buf-breaking-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["bufbuild/buf-breaking-action", "*", "input.buf_token", "env.BUF_TOKEN", "taint"]

‎ql/lib/ext/bufbuild_buf-lint-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["bufbuild/buf-lint-action", "*", "input.buf_token", "env.BUF_TOKEN", "taint"]

‎ql/lib/ext/cachix_cachix-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["cachix/cachix-action", "*", "input.signingKey", "env.CACHIX_SIGNING_KEY", "taint"]

‎ql/lib/ext/coursier_cache-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["coursier/cache-action", "*", "input.path", "env.COURSIER_CACHE", "taint"]

‎ql/lib/ext/crazy-max_ghaction-import-gpg.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["crazy-max/ghaction-import-gpg", "*", "input.fingerprint", "output.fingerprint", "taint"]

‎ql/lib/ext/csexton_release-asset-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["csexton/release-asset-action", "*", "input.release-url", "output.url", "taint"]

‎ql/lib/ext/delaguardo_setup-clojure.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["delaguardo/setup-clojure", "*", "input.boot", "env.BOOT_VERSION", "taint"]

‎ql/lib/ext/franzdiebold_github-env-vars-action.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: sourceModel
5+
data:
6+
- ["franzdiebold/github-env-vars-action", "*", "output.CI_PR_DESCRIPTION", "pull_request_target", "PR body"]
7+
- ["franzdiebold/github-env-vars-action", "*", "output.CI_PR_TITLE", "pull_request_target", "PR title"]

‎ql/lib/ext/game-ci_unity-test-runner.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["game-ci/unity-test-runner", "*", "input.artifactsPath", "output.artifactsPath", "taint"]

‎ql/lib/ext/getsentry_action-release.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["getsentry/action-release", "*", "input.version", "output.version", "taint"]
7+
- ["getsentry/action-release", "*", "input.version_prefix", "output.version", "taint"]

‎ql/lib/ext/github_codeql-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["github/codeql-action", "*", "input.output", "output.sarif-output", "taint"]

‎ql/lib/ext/gradle_gradle-build-action.model.yml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["gradle/gradle-build-action", "*", "input.cache-encryption-key", "env.GRADLE_ENCRYPTION_KEY", "taint"]
7+
- ["gradle/gradle-build-action", "*", "input.build-scan-terms-of-service-agree", "env.BUILD_SCAN_TERMS_OF_SERVICE_AGREE", "taint"]
8+
- ["gradle/gradle-build-action", "*", "input.build-scan-terms-of-service-url", "env.BUILD_SCAN_TERMS_OF_SERVICE_URL", "taint"]

‎ql/lib/ext/haya14busa_action-cond.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["haya14busa/action-cond", "*", "input.if_true", "output.value", "taint"]
7+
- ["haya14busa/action-cond", "*", "input.if_false", "output.value", "taint"]

‎ql/lib/ext/hexlet_project-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["hexlet/project-action", "*", "input.mount-path", "env.PWD", "taint"]

‎ql/lib/ext/jsdaniell_create-json.model.yml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["jsdaniell/create-json", "*", "input.name", "output.successfully", "taint"]
7+
- ["jsdaniell/create-json", "*", "input.json", "output.successfully", "taint"]
8+
- ["jsdaniell/create-json", "*", "input.dir", "output.successfully", "taint"]

‎ql/lib/ext/jwalton_gh-ecr-push.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["jwalton/gh-ecr-push", "*", "input.image", "output.imageUrl", "taint"]

‎ql/lib/ext/khan_pull-request-comment-trigger.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: sourceModel
5+
data:
6+
- ["khan/pull-request-comment-trigger", "*", "output.comment_body", "issue_comment", ""]
7+
- ["khan/pull-request-comment-trigger", "*", "output.comment_body", "pull_request_comment", ""]

‎ql/lib/ext/larsoner_circleci-artifacts-redirector-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["larsoner/circleci-artifacts-redirector-action", "*", "input.artifact-path", "output.url", "taint"]

‎ql/lib/ext/mad9000_actions-find-and-replace-string.model.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,4 @@ extensions:
44
extensible: summaryModel
55
data:
66
- ["mad9000/actions-find-and-replace-string", "*", "input.source", "output.value", "taint"]
7-
- ["mad9000/actions-find-and-replace-string", "*", "input.replace", "output.value", "taint"]
7+
- ["mad9000/actions-find-and-replace-string", "*", "input.replace", "output.value", "taint"]

‎ql/lib/ext/mattdavis0351_actions.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["mattdavis0351/actions", "*", "input.image-name", "output.imageUrl", "taint"]
7+
- ["mattdavis0351/actions", "*", "input.tag", "output.imageUrl", "taint"]

‎ql/lib/ext/metro-digital_setup-tools-for-waas.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["metro-digital/setup-tools-for-waas", "*", "input.gcp_sa_key", "env.GCLOUD_PROJECT", "taint"]

‎ql/lib/ext/mishakav_pytest-coverage-comment.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["mishakav/pytest-coverage-comment", "*", "input.multiple-files", "output.summaryReport", "taint"]

‎ql/lib/ext/mymindstorm_setup-emsdk.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["mymindstorm/setup-emsdk", "*", "input.actions-cache-folder", "env.EMSDK", "taint"]

‎ql/lib/ext/ruby_setup-ruby.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["ruby/setup-ruby", "*", "input.ruby-version", "output.ruby-prefix", "taint"]

‎ql/lib/ext/salsify_action-detect-and-tag-new-version.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["salsify/action-detect-and-tag-new-version", "*", "input.tag-template", "output.tag", "taint"]

‎ql/lib/ext/shallwefootball_upload-s3-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["shallwefootball/upload-s3-action", "*", "input.destination_dir", "output.object_key", "taint"]

‎ql/lib/ext/shogo82148_actions-setup-perl.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["shogo82148/actions-setup-perl", "*", "input.working-directory", "env.PERL5LIB", "taint"]

‎ql/lib/ext/suisei-cn_actions-download-file.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["suisei-cn/actions-download-file", "*", "input.filename", "output.filename", "taint"]

‎ql/lib/ext/timheuer_base64-to-file.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: summaryModel
5+
data:
6+
- ["timheuer/base64-to-file", "*", "input.fileName", "output.filePath", "taint"]
7+
- ["timheuer/base64-to-file", "*", "input.fileDir", "output.filePath", "taint"]

‎ql/lib/ext/tzkhan_pr-update-action.model.yml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: sourceModel
5+
data:
6+
- ["tzkhan/pr-update-action", "*", "output.headMatch", "pull_request_target", ""]

‎ql/lib/ext/xt0rted_slash-command-action.model.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/actions-all
4+
extensible: sourceModel
5+
data:
6+
- ["xt0rted/slash-command-action", "*", "output.command-arguments", "issue_comment", ""]
7+
- ["xt0rted/slash-command-action", "*", "output.command-arguments", "pull_request_comment", ""]

0 commit comments

Comments
 (0)