extensions: - addsTo: pack: codeql/actions-all extensible: actionsSinkModel data: - ["plasmicapp/plasmic-action", "*", "input.project_id", "command-injection", "manual"] - ["plasmicapp/plasmic-action", "*", "input.project_api_token", "command-injection", "manual"] - ["plasmicapp/plasmic-action", "*", "input.branch", "command-injection", "manual"]