13 Commits

Author	SHA1	Message	Date
jarlob	6e9f54ef55	Use double curly braces	2023-04-21 19:03:38 +02:00
jarlob	d80c541da6	Encapsulate composite actions	2023-04-14 10:06:35 +02:00
jarlob	9c7eecf547	Add support for composite actions	2023-04-06 22:53:59 +02:00
jarlob	baefeab2d1	fix tests	2023-04-06 19:11:04 +02:00
jarlob	0a878d4db9	Support yAml extensions	2023-04-06 19:07:38 +02:00
jarlob	eef1973b93	Change UI message	2023-04-05 10:05:24 +02:00
jarlob	5c5b9f99a8	Add simple taint tracking for env variables	2023-04-05 10:03:46 +02:00
jarlob	8ea418216c	Look for script injections in actions/github-script	2023-04-03 23:13:28 +02:00
jarlob	c6eaf194a5	Remove empty.js as it is not needed anymore	2023-04-03 15:09:40 +02:00
jarlob	99d634c8a4	Add more sources, more unit tests, fixes to the GitHub Actions injection query	2023-04-03 15:02:02 +02:00
Asger F	92e8f059c8	JS: Avoid emitting column zero in yaml files	2022-11-08 11:38:26 +01:00
Asger F	a887ff4f09	JS: Add test cases to include results with column-zero end locations	2022-11-07 15:13:25 +01:00
Erik Krogh Kristensen	2a65d1d3ec	move js/actions/injection out of experimental	2022-05-04 16:14:19 +02:00