hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Model actions/exec

Browse Source
This commit is contained in:
Asger F
2023-05-01 11:05:59 +02:00
parent cb9b01cbb7
commit 0497e60ce2
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
javascript/ql/lib/semmle/javascript/frameworks/ActionsLib.qll
View File

@@ -40,3 +40,17 @@ private class GitHubActionsSource extends RemoteFlowSource {
override string getSourceType() { result = "GitHub Actions input" }
}
private class ExecActionsCall extends SystemCommandExecution, DataFlow::CallNode {
ExecActionsCall() {
this = API::moduleImport("@actions/exec").getMember(["exec", "getExecOutput"]).getACall()
}
override DataFlow::Node getACommandArgument() { result = this.getArgument(0) }
override DataFlow::Node getArgumentList() { result = this.getArgument(1) }
override DataFlow::Node getOptionsArg() { result = this.getArgument(2) }
override predicate isSync() { none() }
}