extensions:
  - addsTo:
      pack: codeql/actions-all
      extensible: actionsSinkModel
    data:
      - ["devorbitus/yq-action-output", "*", "input.cmd", "code-injection", "manual"]