extensions: - addsTo: pack: codeql/actions-all extensible: actionsSinkModel data: - ["SonarSource/sonarcloud-github-action", "*", "input.args", "secret-exfiltration", "manual"]