extensions: - addsTo: pack: codeql/actions-all extensible: actionsSinkModel data: - ["mozilla/bedrock", "*", "input.", "code-injection", "generated"]