robojerk/codeql-action

Introduce our own toolcache implementation for use by the runnner

Browse source
This commit is contained in:
Robert 2021-04-22 15:04:59 +01:00
parent 896b4ff181
commit 8c91ba83e2
46 changed files with 811 additions and 159 deletions
Download patch file Download diff file Expand all files Collapse all files

4
queries/unguarded-action-lib.ql
View file

@ -16,6 +16,7 @@ bindingset[lib]
predicate isSafeActionLib(string lib) {
lib = "@actions/http-client" or
lib = "@actions/exec" or
lib = "@actions/io" or
lib.matches("@actions/exec/%")
}
@ -41,7 +42,8 @@ predicate commandSetsActionsEnvVars(string commandName) {
class ActionsLibImport extends ImportDeclaration {
ActionsLibImport() {
getImportedPath().getValue().matches("@actions/%") and
not isSafeActionLib(getImportedPath().getValue())
not isSafeActionLib(getImportedPath().getValue()) or
getImportedPath().getValue() = "./actions-util"
}
string getName() {