31 Commits

Author	SHA1	Message	Date
Jaroslav Lobačevski	891a94c166	Apply suggestions from code review ... Co-authored-by: Asger F <asgerf@github.com>	2023-05-09 16:27:32 +02:00
Jaroslav Lobačevski	1ad23c5366	Apply suggestions from code review ... Co-authored-by: Asger F <asgerf@github.com>	2023-05-09 12:23:06 +02:00
jarlob	e9dee3a185	Move actions/github-script out of Actions.qll	2023-04-14 14:26:23 +02:00
jarlob	599ec5a3b4	Add comment	2023-04-14 10:52:11 +02:00
jarlob	ac1c20673d	Encapsulate github-script	2023-04-14 10:23:49 +02:00
jarlob	d80c541da6	Encapsulate composite actions	2023-04-14 10:06:35 +02:00
jarlob	79218a3946	Use YamlMapping for modeling Env	2023-04-14 00:56:51 +02:00
jarlob	dd52ef85cd	Rename Env	2023-04-13 23:41:31 +02:00
jarlob	76834cbe53	Rename GlobalEnv	2023-04-13 23:13:56 +02:00
jarlob	6790318769	Added the composite word	2023-04-13 22:58:32 +02:00
Jaroslav Lobačevski	8f1bccbb4d	Apply suggestions from code review (comments) ... Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>	2023-04-13 22:55:53 +02:00
jarlob	3745cccedd	Fix warnings	2023-04-06 23:02:08 +02:00
jarlob	af83d8af41	Add comment	2023-04-06 22:59:09 +02:00
jarlob	9c7eecf547	Add support for composite actions	2023-04-06 22:53:59 +02:00
jarlob	0a878d4db9	Support yAml extensions	2023-04-06 19:07:38 +02:00
jarlob	40b7910473	Fix QLDoc warnings	2023-04-05 10:14:54 +02:00
jarlob	5c5b9f99a8	Add simple taint tracking for env variables	2023-04-05 10:03:46 +02:00
jarlob	8ea418216c	Look for script injections in actions/github-script	2023-04-03 23:13:28 +02:00
jarlob	99d634c8a4	Add more sources, more unit tests, fixes to the GitHub Actions injection query	2023-04-03 15:02:02 +02:00
Henti Smith	074fac8f2f	Ran autoformatter on Actions.qll	2022-09-30 09:24:12 +01:00
Henti Smith	700eaf5e41	Added JobRunson	2022-09-29 14:19:02 +01:00
erik-krogh	cc7a9ef97a	rename more acronyms	2022-08-25 20:52:27 +02:00
Henti Smith	dcc76ddf36	Apply suggestions from code review ... Co-authored-by: Henry Mercer <henrymercer@github.com>	2022-07-19 15:53:12 +01:00
Henti Smith	0828474192	Added Workflow::getName and Step::GetId	2022-07-19 15:34:10 +01:00
Erik Krogh Kristensen	c0152a46bc	rename getAReferencedExpression to getASimpleReferenceExpression and add examples of what it can parse	2022-05-05 11:02:47 +02:00
Erik Krogh Kristensen	dc1dc2a33a	parse the uses field in the getters instead of the charpred	2022-05-05 10:40:08 +02:00
Erik Krogh Kristensen	9ea0f71581	convert TODO to a note in Actions::Uses	2022-05-05 10:28:00 +02:00
Erik Krogh Kristensen	1f00ba812a	move YAMLMappingLikeNode to the standard library	2022-05-05 10:22:52 +02:00
Erik Krogh Kristensen	7530923af3	add missing qldoc	2022-05-04 16:14:59 +02:00
Erik Krogh Kristensen	fc6eedd07a	generalize the file pattern for github/actions related YAML	2022-05-04 16:14:19 +02:00
Erik Krogh Kristensen	9db67d4988	move the Actions API out of experimental	2022-05-04 16:14:19 +02:00