extensions: - addsTo: pack: codeql/actions-all extensible: actionsSinkModel data: - ["axel-op/googlejavaformat-action", "*", "input.commitMessage", "command-injection", "manual"] - ["axel-op/googlejavaformat-action", "*", "input.commit-message", "command-injection", "manual"]