extensions:
  - addsTo:
      pack: githubsecuritylab/actions-all
      extensible: sinkModel
    data:
      - ["actions/github-script", "*", "input.script", "code-injection"]