actions/ql/src/experimental/Security/CWE-918/RequestForgery.ql uses source as endpoint
experimental
codeql_pack