diff --git a/ql/lib/codeql/actions/Helper.qll b/ql/lib/codeql/actions/Helper.qll index f6c31a6e8ea..9ac67575b8b 100644 --- a/ql/lib/codeql/actions/Helper.qll +++ b/ql/lib/codeql/actions/Helper.qll @@ -252,26 +252,10 @@ predicate inPrivilegedExternallyTriggerableJob(AstNode node) { ) } -predicate calledByPrivilegedExternallyTriggerableJob(AstNode node) { - exists(ReusableWorkflow rw, ExternalJob caller, Job callee | - callee = node.getEnclosingJob() and - rw.getACaller() = caller and - rw.getAJob() = callee and - caller.isPrivilegedExternallyTriggerable() - ) - or - exists(LocalJob caller | - caller = node.getEnclosingCompositeAction().getACallerJob() and - caller.isPrivilegedExternallyTriggerable() - ) -} - predicate inPrivilegedContext(AstNode node) { inPrivilegedCompositeAction(node) or inPrivilegedExternallyTriggerableJob(node) - or - calledByPrivilegedExternallyTriggerableJob(node) } predicate inNonPrivilegedCompositeAction(AstNode node) {