extensions: - addsTo: pack: codeql/actions-all extensible: actionsSinkModel data: - ["asdf-vm/actions", "*", "input.before_install", "command-injection", "manual"]