extensions: - addsTo: pack: codeql/actions-all extensible: actionsSinkModel data: - ["msys2/setup-msys2", "*", "input.install", "command-injection", "manual"] - ["msys2/setup-msys2", "*", "input.pacboy", "command-injection", "manual"]