hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

actions: simplify using existing UsesStep

Browse Source
This commit is contained in:
yoff
2025-04-01 17:07:21 +02:00
parent ee1eb199b5
commit 6fd8aba560
1 changed files with 1 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql
View File

@@ -16,18 +16,8 @@ import actions
Step stepInJob(Job job) { result = job.(LocalJob).getAStep() }
bindingset[fullActionSelector]
string versionedAction(string fullActionSelector) {
result = fullActionSelector.substring(0, fullActionSelector.indexOf("@"))
or
not exists(fullActionSelector.indexOf("@")) and
result = fullActionSelector
}
string stepUses(Step step) { result = step.getUses().(ScalarValue).getValue() }
string jobNeedsPermission(Job job) {
actionsPermissionsDataModel(versionedAction(stepUses(stepInJob(job))), result)
actionsPermissionsDataModel(stepInJob(job).(UsesStep).getCallee(), result)
}
/** Gets a suggestion for the minimal token permissions for `job`, as a JSON string. */