Alvaro Muñoz 792e8555af fix: remove context 2 events mappings ...

client_paylaod (dispatch), commits (push), head_commit (push) and
merge_group are not under external attacker control so remove them

2024-10-28 11:56:59 +01:00

..

argument_injection_sinks.yml

Better handling of EnvVar Injection and Argument Injection

2024-10-16 08:48:32 +02:00

context_event_map.yml

fix: remove context 2 events mappings

2024-10-28 11:56:59 +01:00

externally_triggereable_events.yml

Remove pull_request from context event map so that accesss to github.event.pull_request are not considered a source for pull_request triggers

2024-10-23 12:15:26 +02:00

poisonable_steps.yml

Add poisonable step for azure/powershell

2024-10-23 09:39:34 +02:00

untrusted_event_properties.yml

Add workflow_dispatch and scheduled to the list of privileged and external (user interaction) events

2024-10-22 11:18:42 +02:00

untrusted_gh_command.yml

New gh CLI sources

2024-10-22 14:57:59 +02:00

untrusted_git_command.yml

New gh CLI sources

2024-10-22 14:57:59 +02:00

vulnerable_actions.yml

feat(queries): Improve Use Of Vulnerable Actions query

2024-08-01 11:37:00 +02:00

workflow_runtime_data.yml

Move configuration to MaD files

2024-06-25 09:47:43 +02:00