mirror of
https://github.com/github/codeql.git
synced 2026-05-04 21:25:44 +02:00
fix(test): Add expected files
This commit is contained in:
Alvaro Muñoz
@@ -1,5 +0,0 @@
|
||||
#!/bin/bash
|
||||
rm -rf ql/src/test/test.testproj || true
|
||||
rm -rf ql/lib/test/test.testproj || true
|
||||
codeql database create ql/src/test/test.testproj -l yaml -s ql/src/test
|
||||
codeql database create ql/lib/test/test.testproj -l yaml -s ql/lib/test
|
||||
378
ql/lib/test/test.expected
Normal file
378
ql/lib/test/test.expected
Normal file
@@ -0,0 +1,378 @@
|
||||
files
|
||||
| .github/workflows/test.yml:0:0:0:0 | .github/workflows/test.yml |
|
||||
yamlNodes
|
||||
| .github/workflows/test.yml:1:1:1:2 | on |
|
||||
| .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:1:5:1:8 | push |
|
||||
| .github/workflows/test.yml:3:1:3:4 | jobs |
|
||||
| .github/workflows/test.yml:4:3:4:6 | job1 |
|
||||
| .github/workflows/test.yml:4:3:40:53 | job1: |
|
||||
| .github/workflows/test.yml:5:5:5:11 | runs-on |
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:5:14:5:26 | ubuntu-latest |
|
||||
| .github/workflows/test.yml:7:5:7:11 | outputs |
|
||||
| .github/workflows/test.yml:8:7:8:16 | job_output |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} |
|
||||
| .github/workflows/test.yml:10:5:10:9 | steps |
|
||||
| .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 |
|
||||
| .github/workflows/test.yml:11:9:11:12 | uses |
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:11:15:11:33 | actions/checkout@v4 |
|
||||
| .github/workflows/test.yml:12:9:12:12 | with |
|
||||
| .github/workflows/test.yml:13:11:13:21 | fetch-depth |
|
||||
| .github/workflows/test.yml:13:11:15:6 | fetch-depth: 0 |
|
||||
| .github/workflows/test.yml:13:24:13:24 | 0 |
|
||||
| .github/workflows/test.yml:15:9:15:12 | name |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:15:15:15:31 | Get changed files |
|
||||
| .github/workflows/test.yml:16:9:16:10 | id |
|
||||
| .github/workflows/test.yml:16:13:16:18 | source |
|
||||
| .github/workflows/test.yml:17:9:17:12 | uses |
|
||||
| .github/workflows/test.yml:17:15:17:42 | tj-acti ... les@v40 |
|
||||
| .github/workflows/test.yml:19:9:19:12 | name |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:19:15:19:43 | Remove ... d files |
|
||||
| .github/workflows/test.yml:20:9:20:10 | id |
|
||||
| .github/workflows/test.yml:20:13:20:16 | step |
|
||||
| .github/workflows/test.yml:21:9:21:12 | uses |
|
||||
| .github/workflows/test.yml:21:15:21:55 | mad9000 ... tring@3 |
|
||||
| .github/workflows/test.yml:22:9:22:12 | with |
|
||||
| .github/workflows/test.yml:23:11:23:16 | source |
|
||||
| .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
| .github/workflows/test.yml:24:11:24:14 | find |
|
||||
| .github/workflows/test.yml:24:17:24:21 | "foo" |
|
||||
| .github/workflows/test.yml:25:11:25:17 | replace |
|
||||
| .github/workflows/test.yml:25:20:25:21 | "" |
|
||||
| .github/workflows/test.yml:26:9:26:10 | id |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:26:13:26:23 | simplesink1 |
|
||||
| .github/workflows/test.yml:27:9:27:11 | run |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} |
|
||||
| .github/workflows/test.yml:28:9:28:10 | id |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:28:13:28:23 | simplesink2 |
|
||||
| .github/workflows/test.yml:29:9:29:11 | run |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} |
|
||||
| .github/workflows/test.yml:31:3:31:6 | job2 |
|
||||
| .github/workflows/test.yml:32:5:32:11 | runs-on |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:32:14:32:26 | ubuntu-latest |
|
||||
| .github/workflows/test.yml:34:5:34:6 | if |
|
||||
| .github/workflows/test.yml:34:9:34:23 | ${{ always() }} |
|
||||
| .github/workflows/test.yml:36:5:36:9 | needs |
|
||||
| .github/workflows/test.yml:36:12:36:15 | job1 |
|
||||
| .github/workflows/test.yml:38:5:38:9 | steps |
|
||||
| .github/workflows/test.yml:39:7:40:53 | - id: sink |
|
||||
| .github/workflows/test.yml:39:9:39:10 | id |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:39:13:39:16 | sink |
|
||||
| .github/workflows/test.yml:40:9:40:11 | run |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
jobNodes
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
stepNodes
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
allUsesNodes
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
stepUsesNodes
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
jobUsesNodes
|
||||
usesSteps
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 | fetch-depth | .github/workflows/test.yml:13:24:13:24 | 0 |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | find | .github/workflows/test.yml:24:17:24:21 | "foo" |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | replace | .github/workflows/test.yml:25:20:25:21 | "" |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | source | .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
runSteps1
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | echo ${{ steps.source.outputs.all_changed_files }} |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | ${{ github.event.pull_request.head.ref }} |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | echo ${{needs.job1.outputs.job_output}} |
|
||||
runSteps2
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
runStepChildren
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:26:9:26:10 | id |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:26:13:26:23 | simplesink1 |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:27:9:27:11 | run |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:28:9:28:10 | id |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:28:13:28:23 | simplesink2 |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:29:9:29:11 | run |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:39:9:39:10 | id |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:39:13:39:16 | sink |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:40:9:40:11 | run |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
varAccesses
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} | steps.step.outputs.value |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} | steps.source.outputs.all_changed_files |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} | steps.source.outputs.all_changed_files |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} | github.event.pull_request.head.ref |
|
||||
| .github/workflows/test.yml:34:9:34:23 | ${{ always() }} | always() |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} | needs.job1.outputs.job_output |
|
||||
orphanVarAccesses
|
||||
nonOrphanVarAccesses
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} | steps.step.outputs.value | .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} | steps.source.outputs.all_changed_files | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} | steps.source.outputs.all_changed_files | .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} | github.event.pull_request.head.ref | .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:34:9:34:23 | ${{ always() }} | always() | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} | needs.job1.outputs.job_output | .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
parentNodes
|
||||
| .github/workflows/test.yml:1:1:1:2 | on | .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:1:5:1:8 | push | .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:3:1:3:4 | jobs | .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:4:3:4:6 | job1 | .github/workflows/test.yml:4:3:40:53 | job1: |
|
||||
| .github/workflows/test.yml:4:3:40:53 | job1: | .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:5:5:5:11 | runs-on | .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest | .github/workflows/test.yml:4:3:40:53 | job1: |
|
||||
| .github/workflows/test.yml:5:14:5:26 | ubuntu-latest | .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:7:5:7:11 | outputs | .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:8:7:8:16 | job_output | .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} | .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} | .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:10:5:10:9 | steps | .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 | .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:11:9:11:12 | uses | .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 | .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 |
|
||||
| .github/workflows/test.yml:11:15:11:33 | actions/checkout@v4 | .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:12:9:12:12 | with | .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:13:11:13:21 | fetch-depth | .github/workflows/test.yml:13:11:15:6 | fetch-depth: 0 |
|
||||
| .github/workflows/test.yml:13:11:15:6 | fetch-depth: 0 | .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:13:24:13:24 | 0 | .github/workflows/test.yml:13:11:15:6 | fetch-depth: 0 |
|
||||
| .github/workflows/test.yml:15:9:15:12 | name | .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files | .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:15:15:31 | Get changed files | .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:16:9:16:10 | id | .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:16:13:16:18 | source | .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:17:9:17:12 | uses | .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:17:15:17:42 | tj-acti ... les@v40 | .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:19:12 | name | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 |
|
||||
| .github/workflows/test.yml:19:15:19:43 | Remove ... d files | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:20:9:20:10 | id | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:20:13:20:16 | step | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:21:9:21:12 | uses | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:21:15:21:55 | mad9000 ... tring@3 | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:22:9:22:12 | with | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:23:11:23:16 | source | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:23:11:26:6 | source: ... iles }} | .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:24:11:24:14 | find | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:24:17:24:21 | "foo" | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:25:11:25:17 | replace | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:25:20:25:21 | "" | .github/workflows/test.yml:23:11:26:6 | source: ... iles }} |
|
||||
| .github/workflows/test.yml:26:9:26:10 | id | .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 |
|
||||
| .github/workflows/test.yml:26:13:26:23 | simplesink1 | .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:27:9:27:11 | run | .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} | .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:28:9:28:10 | id | .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:11:7:31:2 | - uses: ... kout@v4 |
|
||||
| .github/workflows/test.yml:28:13:28:23 | simplesink2 | .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:29:9:29:11 | run | .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} | .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:31:3:31:6 | job2 | .github/workflows/test.yml:4:3:40:53 | job1: |
|
||||
| .github/workflows/test.yml:32:5:32:11 | runs-on | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest | .github/workflows/test.yml:4:3:40:53 | job1: |
|
||||
| .github/workflows/test.yml:32:14:32:26 | ubuntu-latest | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:34:5:34:6 | if | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:34:9:34:23 | ${{ always() }} | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:36:5:36:9 | needs | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:36:12:36:15 | job1 | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:38:5:38:9 | steps | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:39:7:40:53 | - id: sink | .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:39:9:39:10 | id | .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:39:7:40:53 | - id: sink |
|
||||
| .github/workflows/test.yml:39:13:39:16 | sink | .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:40:9:40:11 | run | .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} | .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
cfgNodes
|
||||
| .github/workflows/test.yml:1:1:40:53 | enter on: push |
|
||||
| .github/workflows/test.yml:1:1:40:53 | exit on: push |
|
||||
| .github/workflows/test.yml:1:1:40:53 | exit on: push (normal) |
|
||||
| .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} |
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
dfNodes
|
||||
| .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} |
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
exprNodes
|
||||
| .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} |
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
argumentNodes
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
usesIds
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files | source |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | step |
|
||||
nodeLocations
|
||||
| .github/workflows/test.yml:1:1:40:53 | on: push | .github/workflows/test.yml:1:1:40:53 | .github/workflows/test.yml@1:1:40:53 |
|
||||
| .github/workflows/test.yml:5:5:31:2 | runs-on ... -latest | .github/workflows/test.yml:5:5:31:2 | .github/workflows/test.yml@5:5:31:2 |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... alue }} | .github/workflows/test.yml:8:7:10:4 | .github/workflows/test.yml@8:7:10:4 |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... alue }} | .github/workflows/test.yml:8:19:8:49 | .github/workflows/test.yml@8:19:8:49 |
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 | .github/workflows/test.yml:11:9:15:6 | .github/workflows/test.yml@11:9:15:6 |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files | .github/workflows/test.yml:15:9:19:6 | .github/workflows/test.yml@15:9:19:6 |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | .github/workflows/test.yml:19:9:26:6 | .github/workflows/test.yml@19:9:26:6 |
|
||||
| .github/workflows/test.yml:23:19:23:63 | ${{ ste ... iles }} | .github/workflows/test.yml:23:19:23:63 | .github/workflows/test.yml@23:19:23:63 |
|
||||
| .github/workflows/test.yml:26:9:28:6 | id: simplesink1 | .github/workflows/test.yml:26:9:28:6 | .github/workflows/test.yml@26:9:28:6 |
|
||||
| .github/workflows/test.yml:27:14:27:63 | echo ${ ... iles }} | .github/workflows/test.yml:27:14:27:63 | .github/workflows/test.yml@27:14:27:63 |
|
||||
| .github/workflows/test.yml:28:9:31:2 | id: simplesink2 | .github/workflows/test.yml:28:9:31:2 | .github/workflows/test.yml@28:9:31:2 |
|
||||
| .github/workflows/test.yml:29:14:29:54 | ${{ git ... .ref }} | .github/workflows/test.yml:29:14:29:54 | .github/workflows/test.yml@29:14:29:54 |
|
||||
| .github/workflows/test.yml:32:5:40:53 | runs-on ... -latest | .github/workflows/test.yml:32:5:40:53 | .github/workflows/test.yml@32:5:40:53 |
|
||||
| .github/workflows/test.yml:39:9:40:53 | id: sink | .github/workflows/test.yml:39:9:40:53 | .github/workflows/test.yml@39:9:40:53 |
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} | .github/workflows/test.yml:40:14:40:52 | .github/workflows/test.yml@40:14:40:52 |
|
||||
scopes
|
||||
| .github/workflows/test.yml:1:1:40:53 | on: push |
|
||||
sources
|
||||
| ahmadnassri/action-changed-files | * | output.files | pull_request_target | PR changed files |
|
||||
| ahmadnassri/action-changed-files | * | output.json | pull_request_target | PR changed files |
|
||||
| dorny/paths-filter | * | output.changes | pull_request_target | PR changed files |
|
||||
| franzdiebold/github-env-vars-action | * | output.CI_PR_DESCRIPTION | pull_request_target | PR body |
|
||||
| franzdiebold/github-env-vars-action | * | output.CI_PR_TITLE | pull_request_target | PR title |
|
||||
| jitterbit/get-changed-files | * | output.added | pull_request_target | PR changed files |
|
||||
| jitterbit/get-changed-files | * | output.added_modified | pull_request_target | PR changed files |
|
||||
| jitterbit/get-changed-files | * | output.all | pull_request_target | PR changed files |
|
||||
| jitterbit/get-changed-files | * | output.deleted | pull_request_target | PR changed files |
|
||||
| jitterbit/get-changed-files | * | output.modified | pull_request_target | PR changed files |
|
||||
| jitterbit/get-changed-files | * | output.removed | pull_request_target | PR changed files |
|
||||
| jitterbit/get-changed-files | * | output.renamed | pull_request_target | PR changed files |
|
||||
| khan/pull-request-comment-trigger | * | output.comment_body | issue_comment | |
|
||||
| khan/pull-request-comment-trigger | * | output.comment_body | pull_request_comment | |
|
||||
| octo-org/source-repo/.github/workflows/workflow.yml | * | output.workflow-output | * | Foo |
|
||||
| tj-actions/branch-names | * | output.current_branch | pull_request_target | PR current branch |
|
||||
| tj-actions/branch-names | * | output.head_ref_branch | pull_request_target | PR head branch |
|
||||
| tj-actions/branch-names | * | output.ref_branch | pull_request_target | Branch tirggering workflow run |
|
||||
| tj-actions/changed-files | * | output.added_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.all_changed_and_modified_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.all_changed_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.all_modified_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.all_old_new_renamed_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.changed_keys | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.copied_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.deleted_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.modified_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.modified_keys | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.other_changed_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.other_deleted_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.other_modified_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.renamed_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.type_changed_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.unknown_files | pull_request_target | PR changed files |
|
||||
| tj-actions/changed-files | * | output.unmerged_files | pull_request_target | PR changed files |
|
||||
| tj-actions/verify-changed-files | * | output.changed-files | pull_request_target | PR changed files |
|
||||
| tzkhan/pr-update-action | * | output.headMatch | pull_request_target | |
|
||||
| xt0rted/slash-command-action | * | output.command-arguments | issue_comment | |
|
||||
| xt0rted/slash-command-action | * | output.command-arguments | pull_request_comment | |
|
||||
summaries
|
||||
| akhileshns/heroku-deploy | * | input.branch | output.status | taint |
|
||||
| android-actions/setup-android | * | input.cmdline-tools-version | output.ANDROID_COMMANDLINE_TOOLS_VERSION | taint |
|
||||
| apple-actions/import-codesign-certs | * | input.keychain-password | output.keychain-password | taint |
|
||||
| ashley-taylor/read-json-property-action | * | input.json | output.value | taint |
|
||||
| ashley-taylor/regex-property-action | * | input.replacement | output.value | taint |
|
||||
| ashley-taylor/regex-property-action | * | input.value | output.value | taint |
|
||||
| aszc/change-string-case-action | * | input.replace-with | output.lowercase | taint |
|
||||
| aszc/change-string-case-action | * | input.replace-with | output.uppercase | taint |
|
||||
| aszc/change-string-case-action | * | input.string | output.capitalized | taint |
|
||||
| aws-actions/configure-aws-credentials | * | input.aws-access-key-id | env.AWS_ACCESS_KEY_ID | taint |
|
||||
| aws-actions/configure-aws-credentials | * | input.aws-access-key-id | secret.AWS_ACCESS_KEY_ID | taint |
|
||||
| aws-actions/configure-aws-credentials | * | input.aws-secret-access-key | env.AWS_SECRET_ACCESS_KEY | taint |
|
||||
| aws-actions/configure-aws-credentials | * | input.aws-secret-access-key | secret.AWS_SECRET_ACCESS_KEY | taint |
|
||||
| aws-actions/configure-aws-credentials | * | input.aws-session-token | env.AWS_SESSION_TOKEN | taint |
|
||||
| aws-actions/configure-aws-credentials | * | input.aws-session-token | secret.AWS_SESSION_TOKEN | taint |
|
||||
| bobheadxi/deployments | * | input.env | output.env | taint |
|
||||
| bufbuild/buf-breaking-action | * | input.buf_token | env.BUF_TOKEN | taint |
|
||||
| bufbuild/buf-lint-action | * | input.buf_token | env.BUF_TOKEN | taint |
|
||||
| cachix/cachix-action | * | input.signingKey | env.CACHIX_SIGNING_KEY | taint |
|
||||
| coursier/cache-action | * | input.path | env.COURSIER_CACHE | taint |
|
||||
| crazy-max/ghaction-import-gpg | * | input.fingerprint | output.fingerprint | taint |
|
||||
| csexton/release-asset-action | * | input.release-url | output.url | taint |
|
||||
| delaguardo/setup-clojure | * | input.boot | env.BOOT_VERSION | taint |
|
||||
| frabert/replace-string-action | * | input.replace-with | output.replaced | taint |
|
||||
| frabert/replace-string-action | * | input.string | output.replaced | taint |
|
||||
| game-ci/unity-test-runner | * | input.artifactsPath | output.artifactsPath | taint |
|
||||
| getsentry/action-release | * | input.version | output.version | taint |
|
||||
| getsentry/action-release | * | input.version_prefix | output.version | taint |
|
||||
| github/codeql-action | * | input.output | output.sarif-output | taint |
|
||||
| gradle/gradle-build-action | * | input.build-scan-terms-of-service-agree | env.BUILD_SCAN_TERMS_OF_SERVICE_AGREE | taint |
|
||||
| gradle/gradle-build-action | * | input.build-scan-terms-of-service-url | env.BUILD_SCAN_TERMS_OF_SERVICE_URL | taint |
|
||||
| gradle/gradle-build-action | * | input.cache-encryption-key | env.GRADLE_ENCRYPTION_KEY | taint |
|
||||
| haya14busa/action-cond | * | input.if_false | output.value | taint |
|
||||
| haya14busa/action-cond | * | input.if_true | output.value | taint |
|
||||
| hexlet/project-action | * | input.mount-path | env.PWD | taint |
|
||||
| jsdaniell/create-json | * | input.dir | output.successfully | taint |
|
||||
| jsdaniell/create-json | * | input.json | output.successfully | taint |
|
||||
| jsdaniell/create-json | * | input.name | output.successfully | taint |
|
||||
| jwalton/gh-ecr-push | * | input.image | output.imageUrl | taint |
|
||||
| larsoner/circleci-artifacts-redirector-action | * | input.artifact-path | output.url | taint |
|
||||
| mad9000/actions-find-and-replace-string | * | input.replace | output.value | taint |
|
||||
| mad9000/actions-find-and-replace-string | * | input.source | output.value | taint |
|
||||
| mattdavis0351/actions | * | input.image-name | output.imageUrl | taint |
|
||||
| mattdavis0351/actions | * | input.tag | output.imageUrl | taint |
|
||||
| metro-digital/setup-tools-for-waas | * | input.gcp_sa_key | env.GCLOUD_PROJECT | taint |
|
||||
| mishakav/pytest-coverage-comment | * | input.multiple-files | output.summaryReport | taint |
|
||||
| mymindstorm/setup-emsdk | * | input.actions-cache-folder | env.EMSDK | taint |
|
||||
| octo-org/summary-repo/.github/workflows/workflow.yml | * | input.config-path | output.workflow-output | taint |
|
||||
| octo-org/this-repo/.github/workflows/workflow.yml | * | input.config-path | output.workflow-output | taint |
|
||||
| ruby/setup-ruby | * | input.ruby-version | output.ruby-prefix | taint |
|
||||
| salsify/action-detect-and-tag-new-version | * | input.tag-template | output.tag | taint |
|
||||
| shallwefootball/upload-s3-action | * | input.destination_dir | output.object_key | taint |
|
||||
| shogo82148/actions-setup-perl | * | input.working-directory | env.PERL5LIB | taint |
|
||||
| suisei-cn/actions-download-file | * | input.filename | output.filename | taint |
|
||||
| timheuer/base64-to-file | * | input.fileDir | output.filePath | taint |
|
||||
| timheuer/base64-to-file | * | input.fileName | output.filePath | taint |
|
||||
calls
|
||||
| .github/workflows/test.yml:11:9:15:6 | uses: a ... kout@v4 | actions/checkout |
|
||||
| .github/workflows/test.yml:15:9:19:6 | name: G ... d files | tj-actions/changed-files |
|
||||
| .github/workflows/test.yml:19:9:26:6 | name: R ... d files | mad9000/actions-find-and-replace-string |
|
||||
needs
|
||||
| .github/workflows/test.yml:40:14:40:52 | echo ${ ... utput}} |
|
||||
28
ql/src/test/partial.expected
Normal file
28
ql/src/test/partial.expected
Normal file
@@ -0,0 +1,28 @@
|
||||
edges
|
||||
| .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] | .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} |
|
||||
| .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] |
|
||||
| .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path |
|
||||
| .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 [workflow-output] | .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} |
|
||||
| .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 [workflow-output] |
|
||||
| .github/workflows/calling_workflow.yml:20:5:21:2 | uses: o ... .yml@v1 | .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} |
|
||||
| .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} |
|
||||
| .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | .github/workflows/reusable_workflow.yml:28:14:30:62 | \| |
|
||||
| .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} | .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output1] |
|
||||
| .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output1] | .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} |
|
||||
| .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} | .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output1] |
|
||||
| .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 [step-output] | .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} |
|
||||
| .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} | .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 [step-output] |
|
||||
#select
|
||||
| .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 | .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 [workflow-output] | This node receives taint from $@. | .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} | .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} | This node receives taint from $@. | .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} | .github/workflows/calling_workflow.yml:20:5:21:2 | uses: o ... .yml@v1 | .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} | This node receives taint from $@. | .github/workflows/calling_workflow.yml:20:5:21:2 | uses: o ... .yml@v1 | this source |
|
||||
| .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output1] | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output1] | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 [step-output] | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
| .github/workflows/reusable_workflow.yml:28:14:30:62 | \| | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:28:14:30:62 | \| | This node receives taint from $@. | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | this source |
|
||||
152
ql/src/test/test.expected
Normal file
152
ql/src/test/test.expected
Normal file
@@ -0,0 +1,152 @@
|
||||
edges
|
||||
| .github/workflows/argus_case_study.yml:15:9:24:6 | name: R ... g chars [replaced] | .github/workflows/argus_case_study.yml:26:14:27:95 | \| |
|
||||
| .github/workflows/argus_case_study.yml:17:24:17:52 | ${{gith ... title}} | .github/workflows/argus_case_study.yml:22:19:22:38 | ${{env.ISSUE_TITLE}} |
|
||||
| .github/workflows/argus_case_study.yml:22:19:22:38 | ${{env.ISSUE_TITLE}} | .github/workflows/argus_case_study.yml:15:9:24:6 | name: R ... g chars [replaced] |
|
||||
| .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] | .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} |
|
||||
| .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output2] | .github/workflows/calling_workflow.yml:36:14:36:61 | echo ${ ... put2 }} |
|
||||
| .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] |
|
||||
| .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path |
|
||||
| .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 [workflow-output] | .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} |
|
||||
| .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 [workflow-output] |
|
||||
| .github/workflows/calling_workflow.yml:20:5:21:2 | uses: o ... .yml@v1 | .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} |
|
||||
| .github/workflows/changed-files.yml:16:9:20:6 | name: G ... d files | .github/workflows/changed-files.yml:21:14:24:15 | \| |
|
||||
| .github/workflows/cross3.yml:27:7:37:4 | name: R ... g chars [replaced] | .github/workflows/cross3.yml:39:30:39:74 | ${{step ... laced}} |
|
||||
| .github/workflows/cross3.yml:27:7:37:4 | name: R ... g chars [replaced] | .github/workflows/cross3.yml:57:28:57:72 | ${{step ... laced}} |
|
||||
| .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:27:7:37:4 | name: R ... g chars [replaced] |
|
||||
| .github/workflows/cross3.yml:39:30:39:74 | ${{step ... laced}} | .github/workflows/cross3.yml:41:12:43:5 | \| |
|
||||
| .github/workflows/cross3.yml:57:28:57:72 | ${{step ... laced}} | .github/workflows/cross3.yml:61:21:68:47 | \| |
|
||||
| .github/workflows/cross3.yml:61:21:68:47 | \| | .github/workflows/cross3.yml:47:12:53:109 | \| |
|
||||
| .github/workflows/image_link_generator.yml:15:9:22:6 | name: E ... ial URL [initial_url] | .github/workflows/image_link_generator.yml:25:24:25:67 | ${{ ste ... _url }} |
|
||||
| .github/workflows/image_link_generator.yml:18:17:18:48 | ${{ git ... body }} | .github/workflows/image_link_generator.yml:15:9:22:6 | name: E ... ial URL [initial_url] |
|
||||
| .github/workflows/image_link_generator.yml:22:9:28:6 | name: G ... bugging [redirected_url] | .github/workflows/image_link_generator.yml:31:27:31:66 | ${{ ste ... _url }} |
|
||||
| .github/workflows/image_link_generator.yml:25:24:25:67 | ${{ ste ... _url }} | .github/workflows/image_link_generator.yml:22:9:28:6 | name: G ... bugging [redirected_url] |
|
||||
| .github/workflows/image_link_generator.yml:28:9:35:6 | name: T ... ter PNG [trimmed_url] | .github/workflows/image_link_generator.yml:36:14:37:126 | \| |
|
||||
| .github/workflows/image_link_generator.yml:31:27:31:66 | ${{ ste ... _url }} | .github/workflows/image_link_generator.yml:28:9:35:6 | name: T ... ter PNG [trimmed_url] |
|
||||
| .github/workflows/inter-job.yml:8:7:10:4 | job_out ... alue }} [job_output] | .github/workflows/inter-job.yml:36:14:36:52 | echo ${ ... utput}} |
|
||||
| .github/workflows/inter-job.yml:8:19:8:49 | ${{ ste ... alue }} | .github/workflows/inter-job.yml:8:7:10:4 | job_out ... alue }} [job_output] |
|
||||
| .github/workflows/inter-job.yml:15:9:19:6 | name: G ... d files | .github/workflows/inter-job.yml:23:19:23:63 | ${{ ste ... iles }} |
|
||||
| .github/workflows/inter-job.yml:19:9:27:2 | name: R ... d files [value] | .github/workflows/inter-job.yml:8:19:8:49 | ${{ ste ... alue }} |
|
||||
| .github/workflows/inter-job.yml:23:19:23:63 | ${{ ste ... iles }} | .github/workflows/inter-job.yml:19:9:27:2 | name: R ... d files [value] |
|
||||
| .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} |
|
||||
| .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | .github/workflows/reusable_workflow.yml:28:14:30:62 | \| |
|
||||
| .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output2] | .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output2] |
|
||||
| .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} | .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output1] |
|
||||
| .github/workflows/reusable_workflow.yml:13:16:13:51 | ${{ job ... put2 }} | .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output2] |
|
||||
| .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output1] | .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} |
|
||||
| .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output2] | .github/workflows/reusable_workflow.yml:13:16:13:51 | ${{ job ... put2 }} |
|
||||
| .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} | .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output1] |
|
||||
| .github/workflows/reusable_workflow.yml:23:20:23:62 | ${{ ste ... files}} | .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output2] |
|
||||
| .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 [step-output] | .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} |
|
||||
| .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} | .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 [step-output] |
|
||||
| .github/workflows/reusable_workflow.yml:31:9:33:43 | name: G ... d files | .github/workflows/reusable_workflow.yml:23:20:23:62 | ${{ ste ... files}} |
|
||||
| .github/workflows/simple1.yml:8:9:14:6 | id: summary [value] | .github/workflows/simple1.yml:15:14:16:50 | \| |
|
||||
| .github/workflows/simple1.yml:11:19:11:57 | ${{ git ... sage }} | .github/workflows/simple1.yml:8:9:14:6 | id: summary [value] |
|
||||
| .github/workflows/simple2.yml:14:9:18:6 | name: G ... d files | .github/workflows/simple2.yml:22:19:22:63 | ${{ ste ... iles }} |
|
||||
| .github/workflows/simple2.yml:18:9:26:6 | name: R ... d files [value] | .github/workflows/simple2.yml:28:14:31:15 | \| |
|
||||
| .github/workflows/simple2.yml:22:19:22:63 | ${{ ste ... iles }} | .github/workflows/simple2.yml:18:9:26:6 | name: R ... d files [value] |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... test }} [job_output] | .github/workflows/test.yml:37:14:37:52 | echo ${ ... utput}} |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... test }} | .github/workflows/test.yml:8:7:10:4 | job_out ... test }} [job_output] |
|
||||
| .github/workflows/test.yml:12:9:18:6 | id: step0 [value] | .github/workflows/test.yml:20:17:20:47 | ${{ ste ... value}} |
|
||||
| .github/workflows/test.yml:15:19:15:57 | ${{ git ... sage }} | .github/workflows/test.yml:12:9:18:6 | id: step0 [value] |
|
||||
| .github/workflows/test.yml:18:9:24:6 | id: step1 [MSG] | .github/workflows/test.yml:26:18:26:45 | ${{step ... s.MSG}} |
|
||||
| .github/workflows/test.yml:20:17:20:47 | ${{ ste ... value}} | .github/workflows/test.yml:18:9:24:6 | id: step1 [MSG] |
|
||||
| .github/workflows/test.yml:24:9:29:2 | id: step2 [test] | .github/workflows/test.yml:8:19:8:49 | ${{ ste ... test }} |
|
||||
| .github/workflows/test.yml:26:18:26:45 | ${{step ... s.MSG}} | .github/workflows/test.yml:24:9:29:2 | id: step2 [test] |
|
||||
| composite-actions/action.yml:4:3:4:14 | input who-to-greet | composite-actions/action.yml:28:17:28:42 | ${{ inp ... reet }} |
|
||||
| composite-actions/action.yml:4:3:4:14 | input who-to-greet | composite-actions/action.yml:35:12:35:51 | echo "H ... et }}." |
|
||||
| composite-actions/action.yml:24:7:31:4 | name: Remove foo [value] | composite-actions/action.yml:32:12:32:50 | echo ${ ... alue }} |
|
||||
| composite-actions/action.yml:28:17:28:42 | ${{ inp ... reet }} | composite-actions/action.yml:24:7:31:4 | name: Remove foo [value] |
|
||||
nodes
|
||||
| .github/workflows/argus_case_study.yml:15:9:24:6 | name: R ... g chars [replaced] | semmle.label | name: R ... g chars [replaced] |
|
||||
| .github/workflows/argus_case_study.yml:17:24:17:52 | ${{gith ... title}} | semmle.label | ${{gith ... title}} |
|
||||
| .github/workflows/argus_case_study.yml:22:19:22:38 | ${{env.ISSUE_TITLE}} | semmle.label | ${{env.ISSUE_TITLE}} |
|
||||
| .github/workflows/argus_case_study.yml:26:14:27:95 | \| | semmle.label | \| |
|
||||
| .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] | semmle.label | uses: . ... low.yml [workflow-output1] |
|
||||
| .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output2] | semmle.label | uses: . ... low.yml [workflow-output2] |
|
||||
| .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | semmle.label | ${{ git ... .ref }} |
|
||||
| .github/workflows/calling_workflow.yml:16:5:19:2 | uses: o ... .yml@v1 [workflow-output] | semmle.label | uses: o ... .yml@v1 [workflow-output] |
|
||||
| .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | semmle.label | ${{ git ... .ref }} |
|
||||
| .github/workflows/calling_workflow.yml:20:5:21:2 | uses: o ... .yml@v1 | semmle.label | uses: o ... .yml@v1 |
|
||||
| .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} | semmle.label | echo ${ ... put1 }} |
|
||||
| .github/workflows/calling_workflow.yml:36:14:36:61 | echo ${ ... put2 }} | semmle.label | echo ${ ... put2 }} |
|
||||
| .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} | semmle.label | echo ${ ... tput }} |
|
||||
| .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} | semmle.label | echo ${ ... tput }} |
|
||||
| .github/workflows/changed-files.yml:16:9:20:6 | name: G ... d files | semmle.label | name: G ... d files |
|
||||
| .github/workflows/changed-files.yml:21:14:24:15 | \| | semmle.label | \| |
|
||||
| .github/workflows/cross3.yml:27:7:37:4 | name: R ... g chars [replaced] | semmle.label | name: R ... g chars [replaced] |
|
||||
| .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | semmle.label | ${{gith ... ssage}} |
|
||||
| .github/workflows/cross3.yml:39:30:39:74 | ${{step ... laced}} | semmle.label | ${{step ... laced}} |
|
||||
| .github/workflows/cross3.yml:41:12:43:5 | \| | semmle.label | \| |
|
||||
| .github/workflows/cross3.yml:47:12:53:109 | \| | semmle.label | \| |
|
||||
| .github/workflows/cross3.yml:57:28:57:72 | ${{step ... laced}} | semmle.label | ${{step ... laced}} |
|
||||
| .github/workflows/cross3.yml:61:21:68:47 | \| | semmle.label | \| |
|
||||
| .github/workflows/image_link_generator.yml:15:9:22:6 | name: E ... ial URL [initial_url] | semmle.label | name: E ... ial URL [initial_url] |
|
||||
| .github/workflows/image_link_generator.yml:18:17:18:48 | ${{ git ... body }} | semmle.label | ${{ git ... body }} |
|
||||
| .github/workflows/image_link_generator.yml:22:9:28:6 | name: G ... bugging [redirected_url] | semmle.label | name: G ... bugging [redirected_url] |
|
||||
| .github/workflows/image_link_generator.yml:25:24:25:67 | ${{ ste ... _url }} | semmle.label | ${{ ste ... _url }} |
|
||||
| .github/workflows/image_link_generator.yml:28:9:35:6 | name: T ... ter PNG [trimmed_url] | semmle.label | name: T ... ter PNG [trimmed_url] |
|
||||
| .github/workflows/image_link_generator.yml:31:27:31:66 | ${{ ste ... _url }} | semmle.label | ${{ ste ... _url }} |
|
||||
| .github/workflows/image_link_generator.yml:36:14:37:126 | \| | semmle.label | \| |
|
||||
| .github/workflows/inter-job.yml:8:7:10:4 | job_out ... alue }} [job_output] | semmle.label | job_out ... alue }} [job_output] |
|
||||
| .github/workflows/inter-job.yml:8:19:8:49 | ${{ ste ... alue }} | semmle.label | ${{ ste ... alue }} |
|
||||
| .github/workflows/inter-job.yml:15:9:19:6 | name: G ... d files | semmle.label | name: G ... d files |
|
||||
| .github/workflows/inter-job.yml:19:9:27:2 | name: R ... d files [value] | semmle.label | name: R ... d files [value] |
|
||||
| .github/workflows/inter-job.yml:23:19:23:63 | ${{ ste ... iles }} | semmle.label | ${{ ste ... iles }} |
|
||||
| .github/workflows/inter-job.yml:36:14:36:52 | echo ${ ... utput}} | semmle.label | echo ${ ... utput}} |
|
||||
| .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | semmle.label | input config-path |
|
||||
| .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output1] | semmle.label | output workflow-output1: [workflow-output1] |
|
||||
| .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output2] | semmle.label | output workflow-output1: [workflow-output2] |
|
||||
| .github/workflows/reusable_workflow.yml:11:16:11:51 | ${{ job ... put1 }} | semmle.label | ${{ job ... put1 }} |
|
||||
| .github/workflows/reusable_workflow.yml:13:16:13:51 | ${{ job ... put2 }} | semmle.label | ${{ job ... put2 }} |
|
||||
| .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output1] | semmle.label | job-out ... utput}} [job-output1] |
|
||||
| .github/workflows/reusable_workflow.yml:22:7:24:4 | job-out ... utput}} [job-output2] | semmle.label | job-out ... utput}} [job-output2] |
|
||||
| .github/workflows/reusable_workflow.yml:22:20:22:56 | ${{ ste ... utput}} | semmle.label | ${{ ste ... utput}} |
|
||||
| .github/workflows/reusable_workflow.yml:23:20:23:62 | ${{ ste ... files}} | semmle.label | ${{ ste ... files}} |
|
||||
| .github/workflows/reusable_workflow.yml:25:9:31:6 | id: step1 [step-output] | semmle.label | id: step1 [step-output] |
|
||||
| .github/workflows/reusable_workflow.yml:27:24:27:48 | ${{ inp ... path }} | semmle.label | ${{ inp ... path }} |
|
||||
| .github/workflows/reusable_workflow.yml:28:14:30:62 | \| | semmle.label | \| |
|
||||
| .github/workflows/reusable_workflow.yml:31:9:33:43 | name: G ... d files | semmle.label | name: G ... d files |
|
||||
| .github/workflows/simple1.yml:8:9:14:6 | id: summary [value] | semmle.label | id: summary [value] |
|
||||
| .github/workflows/simple1.yml:11:19:11:57 | ${{ git ... sage }} | semmle.label | ${{ git ... sage }} |
|
||||
| .github/workflows/simple1.yml:15:14:16:50 | \| | semmle.label | \| |
|
||||
| .github/workflows/simple2.yml:14:9:18:6 | name: G ... d files | semmle.label | name: G ... d files |
|
||||
| .github/workflows/simple2.yml:18:9:26:6 | name: R ... d files [value] | semmle.label | name: R ... d files [value] |
|
||||
| .github/workflows/simple2.yml:22:19:22:63 | ${{ ste ... iles }} | semmle.label | ${{ ste ... iles }} |
|
||||
| .github/workflows/simple2.yml:28:14:31:15 | \| | semmle.label | \| |
|
||||
| .github/workflows/test.yml:8:7:10:4 | job_out ... test }} [job_output] | semmle.label | job_out ... test }} [job_output] |
|
||||
| .github/workflows/test.yml:8:19:8:49 | ${{ ste ... test }} | semmle.label | ${{ ste ... test }} |
|
||||
| .github/workflows/test.yml:12:9:18:6 | id: step0 [value] | semmle.label | id: step0 [value] |
|
||||
| .github/workflows/test.yml:15:19:15:57 | ${{ git ... sage }} | semmle.label | ${{ git ... sage }} |
|
||||
| .github/workflows/test.yml:18:9:24:6 | id: step1 [MSG] | semmle.label | id: step1 [MSG] |
|
||||
| .github/workflows/test.yml:20:17:20:47 | ${{ ste ... value}} | semmle.label | ${{ ste ... value}} |
|
||||
| .github/workflows/test.yml:24:9:29:2 | id: step2 [test] | semmle.label | id: step2 [test] |
|
||||
| .github/workflows/test.yml:26:18:26:45 | ${{step ... s.MSG}} | semmle.label | ${{step ... s.MSG}} |
|
||||
| .github/workflows/test.yml:37:14:37:52 | echo ${ ... utput}} | semmle.label | echo ${ ... utput}} |
|
||||
| composite-actions/action.yml:4:3:4:14 | input who-to-greet | semmle.label | input who-to-greet |
|
||||
| composite-actions/action.yml:24:7:31:4 | name: Remove foo [value] | semmle.label | name: Remove foo [value] |
|
||||
| composite-actions/action.yml:28:17:28:42 | ${{ inp ... reet }} | semmle.label | ${{ inp ... reet }} |
|
||||
| composite-actions/action.yml:32:12:32:50 | echo ${ ... alue }} | semmle.label | echo ${ ... alue }} |
|
||||
| composite-actions/action.yml:35:12:35:51 | echo "H ... et }}." | semmle.label | echo "H ... et }}." |
|
||||
subpaths
|
||||
| .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:6:7:6:17 | input config-path | .github/workflows/reusable_workflow.yml:10:7:14:4 | output workflow-output1: [workflow-output1] | .github/workflows/calling_workflow.yml:12:5:15:2 | uses: . ... low.yml [workflow-output1] |
|
||||
#select
|
||||
| .github/workflows/argus_case_study.yml:26:14:27:95 | \| | .github/workflows/argus_case_study.yml:17:24:17:52 | ${{gith ... title}} | .github/workflows/argus_case_study.yml:26:14:27:95 | \| | Potential injection from the ${{ steps.remove_quotations.outputs.replaced }}, which may be controlled by an external user. |
|
||||
| .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:35:14:35:61 | echo ${ ... put1 }} | Potential injection from the ${{ needs.call2.outputs.workflow-output1 }}, which may be controlled by an external user. |
|
||||
| .github/workflows/calling_workflow.yml:36:14:36:61 | echo ${ ... put2 }} | .github/workflows/reusable_workflow.yml:31:9:33:43 | name: G ... d files | .github/workflows/calling_workflow.yml:36:14:36:61 | echo ${ ... put2 }} | Potential injection from the ${{ needs.call2.outputs.workflow-output2 }}, which may be controlled by an external user. |
|
||||
| .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} | .github/workflows/calling_workflow.yml:18:20:18:60 | ${{ git ... .ref }} | .github/workflows/calling_workflow.yml:41:14:41:60 | echo ${ ... tput }} | Potential injection from the ${{ needs.call3.outputs.workflow-output }}, which may be controlled by an external user. |
|
||||
| .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} | .github/workflows/calling_workflow.yml:20:5:21:2 | uses: o ... .yml@v1 | .github/workflows/calling_workflow.yml:46:14:46:60 | echo ${ ... tput }} | Potential injection from the ${{ needs.call4.outputs.workflow-output }}, which may be controlled by an external user. |
|
||||
| .github/workflows/changed-files.yml:21:14:24:15 | \| | .github/workflows/changed-files.yml:16:9:20:6 | name: G ... d files | .github/workflows/changed-files.yml:21:14:24:15 | \| | Potential injection from the ${{ steps.changed-files.outputs.all_changed_files }}, which may be controlled by an external user. |
|
||||
| .github/workflows/cross3.yml:41:12:43:5 | \| | .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:41:12:43:5 | \| | Potential injection from the ${{ env.ISSUE_BODY_PARSED }}, which may be controlled by an external user. |
|
||||
| .github/workflows/cross3.yml:47:12:53:109 | \| | .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:47:12:53:109 | \| | Potential injection from the ${{ env.auto_branch }}, which may be controlled by an external user. |
|
||||
| .github/workflows/cross3.yml:47:12:53:109 | \| | .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:47:12:53:109 | \| | Potential injection from the ${{ env.destination_branch }}, which may be controlled by an external user. |
|
||||
| .github/workflows/cross3.yml:47:12:53:109 | \| | .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:47:12:53:109 | \| | Potential injection from the ${{ env.pr_message }}, which may be controlled by an external user. |
|
||||
| .github/workflows/cross3.yml:47:12:53:109 | \| | .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:47:12:53:109 | \| | Potential injection from the ${{ env.user_name }}, which may be controlled by an external user. |
|
||||
| .github/workflows/cross3.yml:47:12:53:109 | \| | .github/workflows/cross3.yml:32:17:32:52 | ${{gith ... ssage}} | .github/workflows/cross3.yml:47:12:53:109 | \| | Potential injection from the ${{ github.event.after }}, which may be controlled by an external user. |
|
||||
| .github/workflows/image_link_generator.yml:36:14:37:126 | \| | .github/workflows/image_link_generator.yml:18:17:18:48 | ${{ git ... body }} | .github/workflows/image_link_generator.yml:36:14:37:126 | \| | Potential injection from the ${{ steps.trim-url.outputs.trimmed_url }}, which may be controlled by an external user. |
|
||||
| .github/workflows/inter-job.yml:36:14:36:52 | echo ${ ... utput}} | .github/workflows/inter-job.yml:15:9:19:6 | name: G ... d files | .github/workflows/inter-job.yml:36:14:36:52 | echo ${ ... utput}} | Potential injection from the ${{ needs.job1.outputs.job_output }}, which may be controlled by an external user. |
|
||||
| .github/workflows/reusable_workflow.yml:28:14:30:62 | \| | .github/workflows/calling_workflow.yml:14:20:14:60 | ${{ git ... .ref }} | .github/workflows/reusable_workflow.yml:28:14:30:62 | \| | Potential injection from the ${{ inputs.config-path }}, which may be controlled by an external user. |
|
||||
| .github/workflows/simple1.yml:15:14:16:50 | \| | .github/workflows/simple1.yml:11:19:11:57 | ${{ git ... sage }} | .github/workflows/simple1.yml:15:14:16:50 | \| | Potential injection from the ${{ steps.summary.outputs.value }}, which may be controlled by an external user. |
|
||||
| .github/workflows/simple2.yml:28:14:31:15 | \| | .github/workflows/simple2.yml:14:9:18:6 | name: G ... d files | .github/workflows/simple2.yml:28:14:31:15 | \| | Potential injection from the ${{ steps.step.outputs.value }}, which may be controlled by an external user. |
|
||||
| .github/workflows/test.yml:37:14:37:52 | echo ${ ... utput}} | .github/workflows/test.yml:15:19:15:57 | ${{ git ... sage }} | .github/workflows/test.yml:37:14:37:52 | echo ${ ... utput}} | Potential injection from the ${{ needs.job1.outputs.job_output }}, which may be controlled by an external user. |
|
||||
| composite-actions/action.yml:32:12:32:50 | echo ${ ... alue }} | composite-actions/action.yml:4:3:4:14 | input who-to-greet | composite-actions/action.yml:32:12:32:50 | echo ${ ... alue }} | Potential injection from the ${{ steps.replace.outputs.value }}, which may be controlled by an external user. |
|
||||
| composite-actions/action.yml:35:12:35:51 | echo "H ... et }}." | composite-actions/action.yml:4:3:4:14 | input who-to-greet | composite-actions/action.yml:35:12:35:51 | echo "H ... et }}." | Potential injection from the ${{ inputs.who-to-greet }}, which may be controlled by an external user. |
|
||||
Reference in New Issue
Block a user