hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 21:25:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #85 from github/improve_reusable_workflow_calls

Browse Source 
Improve reusable workflow calls
This commit is contained in:
GitHub Security Lab
2024-09-20 15:41:42 +02:00
committed by GitHub
parent e9dfd9ccb4 116d83da5f
commit 59592cc087
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
ql/lib/codeql/actions/dataflow/internal/DataFlowPrivate.qll
View File

@@ -98,6 +98,7 @@ class DataFlowCallable instanceof Cfg::CfgScope {
string getName() {
if this instanceof ReusableWorkflow
then
//result = this.(ReusableWorkflow).getLocation().getFile().getRelativePath()
result =
this.(ReusableWorkflow)
.getLocation()
@@ -107,7 +108,17 @@ class DataFlowCallable instanceof Cfg::CfgScope {
.getLocation()
.getFile()
.getRelativePath()
.indexOf("/.github/workflows") + 1)
.indexOf("/.github/workflows") + 1) or
result =
this.(ReusableWorkflow)
.getLocation()
.getFile()
.getRelativePath()
.suffix(this.(ReusableWorkflow)
.getLocation()
.getFile()
.getRelativePath()
.indexOf(".github/workflows"))
else
if this instanceof CompositeAction
then