mirror of
https://github.com/github/codeql.git
synced 2026-04-26 01:05:15 +02:00
157d0b7f37
None of the current local subgroups precisely captures stdin, so although it's much like both commandargs and file, a separate kind seems better.
32 lines
927 B
YAML
32 lines
927 B
YAML
extensions:
|
|
|
|
- addsTo:
|
|
pack: codeql/threat-models
|
|
extensible: threatModelGrouping
|
|
data:
|
|
# Default threat model
|
|
- ["remote", "default"]
|
|
|
|
# Remote threat models
|
|
- ["request", "remote"]
|
|
- ["response", "remote"]
|
|
|
|
# Local threat models
|
|
- ["database", "local"]
|
|
- ["commandargs", "local"]
|
|
- ["environment", "local"]
|
|
- ["stdin", "local"]
|
|
- ["file", "local"]
|
|
- ["windows-registry", "local"]
|
|
|
|
# Android threat models
|
|
- ["android-external-storage-dir", "android"]
|
|
- ["contentprovider", "android"]
|
|
|
|
# Threat models that are not grouped with any other threat models.
|
|
# (Note that all threat models are a child of "all" implicitly, and we
|
|
# make it explicit here just to make sure all threat models are listed.)
|
|
- ["database-access-result", "all"]
|
|
- ["file-write", "all"]
|
|
- ["reverse-dns", "all"]
|