File tree

• .github/workflows
  • publish.yml
  • test.yml
• .gitignore
• BUILD.bazel
• actions
  • extractor
    • BUILD.bazel
    • codeql-extractor.yml
    • tools
      • autobuild-impl.ps1
      • autobuild.cmd
      • autobuild.sh
  • ql
    • lib
      • actions.qll
      • codeql-pack.lock.yml
      • codeql
        • Locations.qll
        • actions
          • Ast.qll
          • Bash.qll
          • Cfg.qll
          • Consistency.ql
          • DataFlow.qll
          • Helper.qll
          • PowerShell.qll
          • TaintTracking.qll
          • Violations Of Best Practices
            • DefaultableCodeQLInitiatlizeActionQuery.qll
          • ast/internal
            • Ast.qll
            • Yaml.qll
          • config
            • Config.qll
            • ConfigExtensions.qll
          • controlflow
            • BasicBlocks.qll
            • internal
              • Cfg.qll
          • dataflow
            • ExternalFlow.qll
            • FlowSources.qll
            • FlowSteps.qll
            • TaintSteps.qll
            • internal
              • DataFlowImplSpecific.qll
              • DataFlowPrivate.qll
              • DataFlowPublic.qll
              • ExternalFlowExtensions.qll
              • TaintTrackingImplSpecific.qll
              • TaintTrackingPrivate.qll
          • ideContextual
            • IDEContextual.qll
            • printAst.qll
          • security
            • ArgumentInjectionQuery.qll
            • ArtifactPoisoningQuery.qll
            • CachePoisoningQuery.qll
            • CodeInjectionQuery.qll
            • CommandInjectionQuery.qll
            • ControlChecks.qll
            • EnvPathInjectionQuery.qll
            • EnvVarInjectionQuery.qll
            • OutputClobberingQuery.qll
            • PoisonableSteps.qll
            • RequestForgeryQuery.qll
            • SecretExfiltrationQuery.qll
            • SelfHostedQuery.qll
            • UntrustedCheckoutQuery.qll
            • UseOfKnownVulnerableActionQuery.qll
            • UseOfUnversionedImmutableAction.qll
        • files
          • FileSystem.qll
      • ext
        • config
          • argument_injection_sinks.yml
          • context_event_map.yml
          • externally_triggereable_events.yml
          • immutable_actions.yml
          • poisonable_steps.yml
          • untrusted_event_properties.yml
          • untrusted_gh_command.yml
          • untrusted_git_command.yml
          • vulnerable_actions.yml
          • workflow_runtime_data.yml
        • generated
          • composite-actions
            • actions_actions-runner-controller.model.yml
            • adap_flower.model.yml
            • agoric_agoric-sdk.model.yml
            • airbnb_lottie-ios.model.yml
            • airbytehq_airbyte.model.yml
            • amazon-ion_ion-java.model.yml
            • anchore_grype.model.yml
            • anchore_syft.model.yml
            • angular_dev-infra.model.yml
            • ansible_ansible-lint.model.yml
            • ansible_awx.model.yml
            • apache_arrow-datafusion.model.yml
            • apache_arrow-rs.model.yml
            • apache_arrow.model.yml
            • apache_bookkeeper.model.yml
            • apache_brpc.model.yml
            • apache_camel-k.model.yml
            • apache_camel.model.yml
            • apache_flink.model.yml
            • apache_incubator-kie-tools.model.yml
            • apache_nuttx.model.yml
            • apache_opendal.model.yml
            • apache_pekko.model.yml
            • apache_pulsar-helm-chart.model.yml
            • apache_superset.model.yml
            • appflowy-io_appflowy.model.yml
            • aptos-labs_aptos-core.model.yml
            • archivesspace_archivesspace.model.yml
            • armadaproject_armada.model.yml
            • armbian_build.model.yml
            • auth0_auth0-java.model.yml
            • auth0_auth0.net.model.yml
            • auth0_auth0.swift.model.yml
            • autogluon_autogluon.model.yml
            • avaiga_taipy.model.yml
            • aws-amplify_amplify-cli.model.yml
            • aws-powertools_powertools-lambda-python.model.yml
            • aws_amazon-vpc-cni-k8s.model.yml
            • aws_karpenter-provider-aws.model.yml
            • awslabs_amazon-eks-ami.model.yml
            • awslabs_aws-lambda-rust-runtime.model.yml
            • azerothcore_azerothcore-wotlk.model.yml
            • azure_azure-datafactory.model.yml
            • badges_shields.model.yml
            • balena-io_etcher.model.yml
            • balena-os_balena-engine.model.yml
            • ben-manes_caffeine.model.yml
            • bokeh_bokeh.model.yml
            • botpress_botpress.model.yml
            • braintree_braintree-android-drop-in.model.yml
            • braintree_braintree_android.model.yml
            • broadinstitute_gatk.model.yml
            • canonical_multipass.model.yml
            • chia-network_actions.model.yml
            • chia-network_chia-blockchain.model.yml
            • chipsalliance_chisel.model.yml
            • chocobozzz_peertube.model.yml
            • cilium_cilium-cli.model.yml
            • cilium_cilium.model.yml
            • citusdata_citus.model.yml
            • clerk_javascript.model.yml
            • cloud-custodian_cloud-custodian.model.yml
            • cloudflare_workers-sdk.model.yml
            • cloudfoundry_cloud_controller_ng.model.yml
            • coder_coder.model.yml
            • coil-kt_coil.model.yml
            • commaai_openpilot.model.yml
            • conan-io_conan-center-index.model.yml
            • corretto_corretto-8.model.yml
            • cosmos_cosmos-sdk.model.yml
            • coturn_coturn.model.yml
            • crunchydata_postgres-operator.model.yml
            • cvc5_cvc5.model.yml
            • d2l-ai_d2l-en.model.yml
            • danysk_build-check-deploy-gradle-action.model.yml
            • datadog_dd-trace-dotnet.model.yml
            • datadog_dd-trace-go.model.yml
            • datadog_dd-trace-js.model.yml
            • datafuselabs_databend.model.yml
            • davatorium_rofi.model.yml
            • debezium_debezium.model.yml
            • defenseunicorns_zarf.model.yml
            • demarches-simplifiees_demarches-simplifiees.fr.model.yml
            • department-of-veterans-affairs_vets-website.model.yml
            • devexpress_devextreme.model.yml
            • diggerhq_digger.model.yml
            • diku-dk_futhark.model.yml
            • discourse_.github.model.yml
            • dnsjava_dnsjava.model.yml
            • dotintent_react-native-ble-plx.model.yml
            • dotnet_docs-tools.model.yml
            • dotnet_dotnet-monitor.model.yml
            • dragonflydb_dragonfly.model.yml
            • drawpile_drawpile.model.yml
            • eksctl-io_eksctl.model.yml
            • elastic_apm-agent-dotnet.model.yml
            • elastic_apm-agent-java.model.yml
            • elastic_apm-server.model copy.yml
            • elementor_elementor.model.yml
            • emberjs_data.model.yml
            • emqx_emqx.model.yml
            • eonasdan_tempus-dominus.model.yml
            • erlang_otp.model.yml
            • esphome_esphome.model.yml
            • expensify_app.model.yml
            • expo_expo.model.yml
            • expo_vscode-expo.model.yml
            • external-secrets_external-secrets.model.yml
            • facebook_buck2.model.yml
            • facebook_flow.model.yml
            • facebook_yoga.model.yml
            • facebookresearch_xformers.model.yml
            • fastly_compute-actions.model.yml
            • felangel_bloc.model.yml
            • firebase_firebase-ios-sdk.model.yml
            • flagsmith_flagsmith.model.yml
            • flaxengine_flaxengine.model.yml
            • flipperdevices_flipperzero-firmware.model.yml
            • fluxcd_flux2.model.yml
            • forcedotcom_salesforcedx-vscode.model.yml
            • fossasia_visdom.model.yml
            • freckle_stack-action.model.yml
            • freeradius_freeradius-server.model.yml
            • gaphor_gaphor.model.yml
            • getsentry_action-release.model.yml
            • github_codeql-action.model.yml
            • github_ruby.model.yml
            • gittools_gitversion.model.yml
            • go-spatial_tegola.model.yml
            • goauthentik_authentik.model.yml
            • godotengine_godot.model.yml
            • google_dagger.model.yml
            • googleapis_java-cloud-bom.model.yml
            • googleapis_sdk-platform-java.model.yml
            • googlecloudplatform_dataflowtemplates.model.yml
            • googlecloudplatform_magic-modules.model.yml
            • gravitational_teleport.model.yml
            • grote_transportr.model.yml
            • hashicorp_nomad.model.yml
            • hashicorp_terraform.model.yml
            • hashicorp_vault.model.yml
            • home-assistant_android.model.yml
            • homebrew_actions.model.yml
            • hyperledger_aries-cloudagent-python.model.yml
            • hyperledger_fabric-samples.model.yml
            • igniterealtime_openfire.model.yml
            • infracost_actions.model.yml
            • inspektor-gadget_inspektor-gadget.model.yml
            • intel-analytics_ipex-llm.model.yml
            • ionic-team_ionic-framework.model.yml
            • ionic-team_ionicons.model.yml
            • ionic-team_stencil.model.yml
            • ipfs_aegir.model.yml
            • jetbrains_jetbrainsruntime.model.yml
            • jhipster_generator-jhipster.model.yml
            • jsocol_django-ratelimit.model.yml
            • juicedata_juicefs.model.yml
            • jupyter_docker-stacks.model.yml
            • keycloak_keycloak.model.yml
            • kserve_kserve.model.yml
            • kubeflow_katib.model.yml
            • kubeflow_training-operator.model.yml
            • kubernetes-sigs_karpenter.model.yml
            • kubernetes-sigs_kwok.model.yml
            • kubescape_kubescape.model.yml
            • kubeshop_botkube.model.yml
            • kyverno_kyverno.model.yml
            • lancedb_lance.model.yml
            • launchdarkly_ios-client-sdk.model.yml
            • layer5labs_meshmap-snapshot.model.yml
            • ldc-developers_ldc.model.yml
            • ledgerhq_ledger-live.model.yml
            • lerna_lerna.model.yml
            • lf-edge_eve.model.yml
            • libgit2_libgit2.model.yml
            • lightning-ai_pytorch-lightning.model.yml
            • lightning-ai_torchmetrics.model.yml
            • linkerd_linkerd2.model.yml
            • logseq_publish-spa.model.yml
            • macvim-dev_macvim.model.yml
            • mamba-org_mamba.model.yml
            • maplibre_maplibre-native.model.yml
            • mastodon_mastodon.model.yml
            • mavlink_qgroundcontrol.model.yml
            • mdanalysis_mdanalysis.model.yml
            • medic_cht-core.model.yml
            • medusajs_medusa.model.yml
            • metabase_metabase.model.yml
            • metamask_action-create-release-pr.model.yml
            • metamask_action-npm-publish.model.yml
            • microsoft_fluentui.model.yml
            • microsoft_playwright.model.yml
            • microsoft_wsl.model.yml
            • milvus-io_milvus.model.yml
            • mlflow_mlflow.model.yml
            • modin-project_modin.model.yml
            • mozilla_addons-server.model.yml
            • mozilla_bedrock.model.yml
            • mozilla_sccache.model.yml
            • msys2_setup-msys2.model.yml
            • mumble-voip_mumble.model.yml
            • nasa_fprime.model.yml
            • nats-io_nats-server.model.yml
            • nearform-actions_optic-release-automation-action.model.yml
            • nektos_act.model.yml
            • neo4j-contrib_neo4j-apoc-procedures.model.yml
            • neondatabase_neon.model.yml
            • neovim_neovim.model.yml
            • nhost_nhost.model.yml
            • nix-community_nixos-wsl.model.yml
            • novuhq_novu.model.yml
            • nymtech_nym.model.yml
            • obsproject_obs-studio.model.yml
            • ocaml_dune.model.yml
            • oneflow-inc_oneflow.model.yml
            • open-telemetry_opentelemetry-ruby-contrib.model.yml
            • open-telemetry_opentelemetry-ruby.model.yml
            • open-watcom_open-watcom-v2.model.yml
            • openapitools_openapi-generator.model.yml
            • openjdk_jdk.model.yml
            • opensearch-project_opensearch-net.model.yml
            • opensearch-project_security.model.yml
            • opentrons_opentrons.model.yml
            • openvinotoolkit_openvino.model.yml
            • openzeppelin_openzeppelin-contracts-upgradeable.model.yml
            • openzeppelin_openzeppelin-contracts.model.yml
            • oppia_oppia.model.yml
            • oracle_graal.model.yml
            • oracle_truffleruby.model.yml
            • orhun_git-cliff.model.yml
            • oven-sh_bun.model.yml
            • owntracks_android.model.yml
            • pandas-dev_pandas.model.yml
            • pardeike_harmony.model.yml
            • pennylaneai_pennylane.model.yml
            • phalcon_cphalcon.model.yml
            • philosowaffle_peloton-to-garmin.model.yml
            • php_php-src.model.yml
            • phpdocumentor_phpdocumentor.model.yml
            • pinecone-io_pinecone-python-client.model.yml
            • pixijs_pixijs.model.yml
            • posthog_posthog.model.yml
            • primer_react.model.yml
            • project-chip_connectedhomeip.model.yml
            • projectnessie_nessie.model.yml
            • psf_black.model.yml
            • pyca_cryptography.model.yml
            • pyg-team_pytorch_geometric.model.yml
            • python-poetry_poetry.model.yml
            • python_mypy.model.yml
            • quarto-dev_quarto-cli.model.yml
            • quay_clair.model.yml
            • quickwit-oss_quickwit.model.yml
            • r-lib_actions.model.yml
            • randombit_botan.model.yml
            • raspberrypi_documentation.model.yml
            • ray-project_kuberay.model.yml
            • readthedocs_actions.model.yml
            • reflex-dev_reflex.model.yml
            • renovatebot_renovate.model.yml
            • rethinkdb_rethinkdb.model.yml
            • risc0_risc0.model.yml
            • rocketchat_rocket.chat.model.yml
            • rook_rook.model.yml
            • roots_trellis.model.yml
            • ruby_debug.model.yml
            • ruby_ruby.model.yml
            • rusefi_rusefi.model.yml
            • saltstack_salt.model.yml
            • saltstack_salt.yml
            • sap_sapmachine.model.yml
            • scala-native_scala-native.model.yml
            • scitools_iris.model.yml
            • scylladb_scylla-operator.model.yml
            • shader-slang_slang.model.yml
            • shaka-project_shaka-player.model.yml
            • shakacode_react-webpack-rails-tutorial.model.yml
            • simple-icons_simple-icons.model.yml
            • slint-ui_slint.model.yml
            • solidusio_solidus.model.yml
            • solo-io_gloo.model.yml
            • sonarr_sonarr.model.yml
            • sonic-pi-net_sonic-pi.model.yml
            • spacedriveapp_spacedrive.model.yml
            • spockframework_spock.model.yml
            • spring-io_initializr.model.yml
            • spring-io_start.spring.io.model.yml
            • spring-projects_spring-boot.model.yml
            • spring-projects_spring-framework.model.yml
            • spring-projects_spring-graphql.model.yml
            • square_workflow-kotlin.model.yml
            • stefanprodan_podinfo.model.yml
            • stellar_go.model.yml
            • streetsidesoftware_cspell.model.yml
            • subquery_subql.model.yml
            • swagger-api_swagger-codegen.model.yml
            • swagger-api_swagger-parser.model.yml
            • tarantool_tarantool.model.yml
            • telepresenceio_telepresence.model.yml
            • tensorflow_datasets.model.yml
            • texstudio-org_texstudio.model.yml
            • toeverything_affine.model.yml
            • treeverse_lakefs.model.yml
            • trezor_trezor-firmware.model.yml
            • tribler_tribler.model.yml
            • trunk-io_trunk-action.model.yml
            • unidata_metpy.model.yml
            • unstructured-io_unstructured.model.yml
            • vercel_turbo.model.yml
            • vesoft-inc_nebula.model.yml
            • vkcom_vkui.model.yml
            • vuetifyjs_vuetify.model.yml
            • wagoodman_dive.model.yml
            • walletconnect_walletconnectswiftv2.model.yml
            • wazuh_wazuh.model.yml
            • web-infra-dev_rspack.model.yml
            • webassembly_wabt.model.yml
            • wntrblm_nox.model.yml
            • xrplf_rippled.model.yml
            • zcash_zcash.model.yml
            • zenml-io_zenml.model.yml
            • zeroc-ice_ice.model.yml
          • reusable-workflows
            • 0xpolygon_polygon-edge.model.yml
            • 8vim_8vim.model.yml
            • actions_reusable-workflows.model.yml
            • adap_flower.model.yml
            • aio-libs_multidict.model.yml
            • aio-libs_yarl.model.yml
            • airbytehq_airbyte.model.yml
            • alphagov_collections.model.yml
            • alphagov_frontend.model.yml
            • alphagov_publishing-api.model.yml
            • apache_druid.model.yml
            • apache_flink.model.yml
            • apache_spark.model.yml
            • argilla-io_argilla.model.yml
            • argoproj_argo-cd.model.yml
            • argoproj_argo-rollouts.model.yml
            • aws-amplify_amplify-ui.model.yml
            • azure_apiops.model.yml
            • azure_mlops-templates.model.yml
            • bbq-beets_avocaddo-cmw.model.yml
            • bbq-beets_mobile-ci-cd.model.yml
            • bbq-beets_yujincat-action.model.yml
            • bdunderscore_modular-avatar.model.yml
            • benc-uk_workflow-dispatch.model.yml
            • bridgecrewio_checkov.model.yml
            • bugsnag_bugsnag-ruby.model.yml
            • bytecodealliance_wasm-micro-runtime.model.yml
            • celo-org_celo-blockchain.model.yml
            • cemu-project_cemu.model.yml
            • cesiumgs_cesium-unreal.model.yml
            • cgal_cgal.model.yml
            • checkstyle_checkstyle.model.yml
            • chia-network_actions.model.yml
            • chipsalliance_chisel.model.yml
            • clickhouse_clickhouse.model.yml
            • cloudfoundry_cli.model.yml
            • cloudposse_github-action-matrix-outputs-write.model.yml
            • cocotb_cocotb.model.yml
            • codeigniter4_codeigniter4.model.yml
            • com-lihaoyi_mill.model.yml
            • cosmos_ibc-go.model.yml
            • crowdsecurity_crowdsec.model.yml
            • cryptomator_cryptomator.model.yml
            • daeuniverse_dae.model.yml
            • dafny-lang_dafny.model.yml
            • dagger_dagger.model.yml
            • dash-industry-forum_dash.js.model.yml
            • datadog_dd-trace-go.model.yml
            • datadog_dd-trace-py.model.yml
            • datafuselabs_databend.model.yml
            • dbt-labs_dbt-bigquery.model.yml
            • dbt-labs_dbt-core.model.yml
            • dbt-labs_dbt-snowflake.model.yml
            • decidim_decidim.model.yml
            • defectdojo_django-defectdojo.model.yml
            • dependencytrack_dependency-track.model.yml
            • devexpress_testcafe.model.yml
            • dfhack_dfhack.model.yml
            • docker_build-push-action.model.yml
            • dragonwell-project_dragonwell11.model.yml
            • earthly_earthly.model.yml
            • eclipse-vertx_vert.x.model.yml
            • eclipse-vertx_vertx-sql-client.model.yml
            • elastic_elasticsearch-net.model.yml
            • element-hq_element-desktop.model.yml
            • envoyproxy_envoy.model.yml
            • etcd-io_bbolt.model.yml
            • etcd-io_etcd.model.yml
            • eventstore_eventstore.model.yml
            • expensify_app.model.yml
            • external-secrets_external-secrets.model.yml
            • facebook_create-react-app.model.yml
            • facebookresearch_xformers.model.yml
            • falcosecurity_falco.model.yml
            • fastify_fastify.model.yml
            • ferretdb_ferretdb.model.yml
            • filecoin-project_venus.model.yml
            • firebase_firebase-unity-sdk.model.yml
            • flarum_framework.model.yml
            • fluent_fluent-bit.model.yml
            • flux-iac_tofu-controller.model.yml
            • flyteorg_flyte.model.yml
            • foundatiofx_foundatio.model.yml
            • freecad_freecad.model.yml
            • getpelican_pelican.model.yml
            • getporter_porter.model.yml
            • getsentry_sentry-dart.model.yml
            • getsentry_sentry-unity.model.yml
            • gitpod-io_gitpod.model.yml
            • gittools_gitversion.model.yml
            • googlecloudplatform_magic-modules.model.yml
            • googlecloudplatform_nodejs-docs-samples.model.yml
            • gravitational_teleport.model.yml
            • gravitl_netmaker.model.yml
            • h2oai_wave.model.yml
            • hadashia_vcontainer.model.yml
            • hashgraph_hedera-services.model.yml
            • hashicorp_boundary.model.yml
            • hashicorp_consul.model.yml
            • hashicorp_terraform-cdk.model.yml
            • hashicorp_terraform-provider-tfe.model.yml
            • hashicorp_terraform.model.yml
            • hashicorp_vault.model.yml
            • heroku_cli.model.yml
            • hitobito_hitobito.model.yml
            • home-assistant_operating-system.model.yml
            • homuler_mediapipeunityplugin.model.yml
            • huggingface_doc-builder.model.yml
            • huggingface_transformers.model.yml
            • hyperion-project_hyperion.ng.model.yml
            • ibm_sarama.model.yml
            • icloud-photos-downloader_icloud_photos_downloader.model.yml
            • immich-app_immich.model.yml
            • inria_spoon.model.yml
            • intel_intel-device-plugins-for-kubernetes.model.yml
            • inverse-inc_packetfence.model.yml
            • ispc_ispc.model.yml
            • jetbrains_intellij-platform-gradle-plugin.model.yml
            • jupyter_docker-stacks.model.yml
            • kairos-io_kairos.model.yml
            • kanidm_kanidm.model.yml
            • kata-containers_kata-containers.model.yml
            • kiali_kiali.model.yml
            • kotest_kotest.model.yml
            • kubernetes_ingress-nginx.model.yml
            • kubescape_kubescape.model.yml
            • kubeshop_botkube.model.yml
            • kumahq_kuma.model.yml
            • labring_sealos.model.yml
            • laion-ai_open-assistant.model.yml
            • learningequality_kolibri.model.yml
            • lensesio_stream-reactor.model.yml
            • leptos-rs_leptos.model.yml
            • lightning-ai_pytorch-lightning.model.yml
            • liquibase_liquibase.model.yml
            • litestar-org_litestar.model.yml
            • llvm_circt.model.yml
            • lnbits_lnbits.model.yml
            • lutris_lutris.model.yml
            • mailu_mailu.model.yml
            • mamba-org_mamba.model.yml
            • manticoresoftware_manticoresearch.model.yml
            • marcelotduarte_cx_freeze.model.yml
            • materialdesigninxaml_materialdesigninxamltoolkit.model.yml
            • matter-labs_zksync-era.model.yml
            • mattermost_desktop.model.yml
            • mattermost_mattermost.model.yml
            • mealie-recipes_mealie.model.yml
            • meshery_meshery.model.yml
            • meshtastic_firmware.model.yml
            • microcks_microcks.model.yml
            • microsoft_applicationinsights-java.model.yml
            • microsoft_chat-copilot.model.yml
            • microsoft_msquic.model.yml
            • microsoft_oryx.model.yml
            • microsoft_pr-metrics.model.yml
            • microsoft_react-native-windows-samples.model.yml
            • microsoft_vscode-cpptools.model.yml
            • moby_buildkit.model.yml
            • moby_moby.model.yml
            • mosaicml_composer.model.yml
            • msys2_setup-msys2.model.yml
            • mudler_localai.model.yml
            • mustardchef_wsabuilds.model.yml
            • n8n-io_n8n.model.yml
            • napari_napari.model.yml
            • nasa_fprime.model.yml
            • nautobot_nautobot.model.yml
            • nektos_act.model.yml
            • neondatabase_neon.model.yml
            • neovim_neovim.model.yml
            • nethermindeth_nethermind.model.yml
            • newrelic_newrelic-dotnet-agent.model.yml
            • newrelic_newrelic-java-agent.model.yml
            • newrelic_node-newrelic.model.yml
            • nexus-mods_nexusmods.app.model.yml
            • nginxinc_kubernetes-ingress.model.yml
            • nocodb_nocodb.model.yml
            • novuhq_novu.model.yml
            • npm_abbrev-js.model.yml
            • npm_cli.model.yml
            • npm_fs-minipass.model.yml
            • npm_hosted-git-info.model.yml
            • npm_ini.model.yml
            • npm_json-parse-even-better-errors.model.yml
            • npm_minify-registry-metadata.model.yml
            • npm_mute-stream.model.yml
            • npm_node-semver.model.yml
            • npm_node-which.model.yml
            • npm_nopt.model.yml
            • npm_normalize-package-data.model.yml
            • npm_write-file-atomic.model.yml
            • onflow_cadence.model.yml
            • open-goal_jak-project.model.yml
            • open-telemetry_opentelemetry-demo.model.yml
            • open-telemetry_opentelemetry-dotnet-contrib.model.yml
            • open-telemetry_opentelemetry-dotnet.model.yml
            • open-telemetry_opentelemetry-java-instrumentation.model.yml
            • open-telemetry_opentelemetry-js-contrib.model.yml
            • open-telemetry_opentelemetry-operator.model.yml
            • openbao_openbao.model.yml
            • openhab_openhab-docs.model.yml
            • openmined_pysyft.model.yml
            • opentofu_opentofu.model.yml
            • openttd_openttd.model.yml
            • openvinotoolkit_openvino.model.yml
            • openxla_iree.model.yml
            • openzfs_zfs.model.yml
            • operator-framework_java-operator-sdk.model.yml
            • orange-opensource_hurl.model.yml
            • paolosalvatori_servicebusexplorer.model.yml
            • parcel-bundler_parcel.model.yml
            • pardeike_harmony.model.yml
            • pcsx2_pcsx2.model.yml
            • pennylaneai_pennylane.model.yml
            • pinecone-io_pinecone-python-client.model.yml
            • pixie-io_pixie.model.yml
            • plantuml_plantuml.model.yml
            • powerdns_pdns.model.yml
            • preactjs_preact.model.yml
            • prismlauncher_prismlauncher.model.yml
            • product-os_flowzone.model.yml
            • project-oak_oak.model.yml
            • prql_prql.model.yml
            • pulumi_pulumi.model.yml
            • puppeteer_puppeteer.model.yml
            • puppetlabs_puppetlabs-puppetdb.model.yml
            • pyo3_maturin.model.yml
            • pyo3_pyo3.model.yml
            • python_cpython.model.yml
            • pytorch_botorch.model.yml
            • pytorch_xla.model.yml
            • quarto-dev_quarto-cli.model.yml
            • rancher_dashboard.model.yml
            • rasterio_rasterio.model.yml
            • redisearch_redisearch.model.yml
            • remix-run_remix.model.yml
            • rmcrackan_libation.model.yml
            • rocketchat_rocket.chat.model.yml
            • ruby_ruby.wasm.model.yml
            • rustdesk_rustdesk.model.yml
            • saadeghi_daisyui.model.yml
            • sagemath_sage.model.yml
            • schemastore_schemastore.model.yml
            • scikit-learn_scikit-learn.model.yml
            • seleniumhq_selenium.model.yml
            • shaka-project_shaka-packager.model.yml
            • shaka-project_shaka-player.model.yml
            • shimataro_ssh-key-action.model.yml
            • softfever_orcaslicer.model.yml
            • software-mansion_react-native-reanimated.model.yml
            • solana-labs_solana.model.yml
            • sonarr_sonarr.model.yml
            • speedb-io_speedb.model.yml
            • spring-cloud_spring-cloud-dataflow.model.yml
            • sqlfluff_sqlfluff.model.yml
            • stdlib-js_stdlib.model.yml
            • stereokit_stereokit.model.yml
            • streetsidesoftware_cspell.model.yml
            • supabase_auth.model.yml
            • supabase_cli.model.yml
            • tencent_hippy.model.yml
            • tgstation_tgstation.model.yml
            • thesofproject_sof.model.yml
            • tiann_kernelsu.model.yml
            • tiledb-inc_tiledb.model.yml
            • toeverything_affine.model.yml
            • tracel-ai_burn.model.yml
            • tribler_tribler.model.yml
            • ubisoft_sharpmake.model.yml
            • unity-technologies_ml-agents.model.yml
            • urbit_urbit.model.yml
            • uyuni-project_uyuni.model.yml
            • vert-x3_vertx-hazelcast.model.yml
            • vkcom_vkui.model.yml
            • walletconnect_web3modal.model.yml
            • warzone2100_warzone2100.model.yml
            • wasmedge_wasmedge.model.yml
            • web-infra-dev_rspack.model.yml
            • werf_werf.model.yml
            • widdix_aws-cf-templates.model.yml
            • wildfly_wildfly.model.yml
            • yt-dlp_yt-dlp.model.yml
            • zenml-io_zenml.model.yml
            • zephyrproject-rtos_zephyr.model.yml
            • zitadel_zitadel.model.yml
        • manual
          • 8398a7_action-slack.model.yml
          • AsasInnab_regex-action.model.yml
          • MeilCli_regex-match.model.yml
          • SonarSource_sonarcloud-github-action.model.yml
          • Steph0_dotenv-configserver.model.yml
          • WyriHaximus_github-action-files-in-commit.model.yml
          • aarcangeli_load-dotenv.model.yml
          • ab185508_file-type-finder.model.yml
          • actions-ecosystem_action-regex-match.model.yml
          • actions_github-script.model.yml
          • ahmadnassri_action-changed-files.model.yml
          • akefirad_loadenv-action.model.yml
          • akhileshns_heroku-deploy.model.yml
          • alessbell_pull-request-comment-branch.model.yml
          • amannn_action-semantic-pull-request.model.yml
          • anchore_sbom-action.model.yml
          • anchore_scan-action.model.yml
          • andresz1_size-limit-action.model.yml
          • android-actions_setup-android.model.yml
          • ankitjain28may_list-files-in-pr.model.yml
          • apple-actions_import-codesign-certs.model.yml
          • appleboy_ssh-action.model.yml
          • asdf-vm_actions.model.yml
          • ashley-taylor_read-json-property-action.model.yml
          • ashley-taylor_regex-property-action.model.yml
          • aszc_change-string-case-action.model.yml
          • avraamMavridis_files-changed-action.model.yml
          • aws-actions_configure-aws-credentials.model.yml
          • axel-op_googlejavaformat-action.model.yml
          • azure_cli.model.yml
          • azure_powershell.model.yml
          • bahmutov_npm-install.model.yml
          • blackducksoftware_github-action.model.yml
          • bobheadxi_deployments.model.yml
          • bufbuild_buf-breaking-action.model.yml
          • bufbuild_buf-lint-action.model.yml
          • bufbuild_buf-setup-action.model.yml
          • c-py_action-dotenv-to-setenv.model.yml
          • cachix_cachix-action.model.yml
          • changesets_action.model.yml
          • cloudflare_wrangler-action.model.yml
          • cosq-network_dotenv-loader.model.yml
          • coursier_cache-action.model.yml
          • crazy-max_ghaction-chocolatey.model.yml
          • crazy-max_ghaction-import-gpg.model.yml
          • csexton_release-asset-action.model.yml
          • cycjimmy_semantic-release-action.model.yml
          • cypress-io_github-action.model.yml
          • dailydotdev_action-devcard.model.yml
          • danielpalme_reportgenerator-github-action.model.yml
          • daspn_private-actions-checkout.model.yml
          • dawidd6_action-ansible-playbook.model.yml
          • dawidd6_action-download-artifact.model.yml
          • delaguardo_setup-clojure.model.yml
          • determinatesystems_magic-nix-cache-action.model.yml
          • devorbitus_yq-action-output.model.yml
          • docker-practice_actions-setup-docker.model.yml
          • docker_build-push-action.model.yml
          • dsfx3d_action-extract-unique-matches.model.yml
          • eficode_resolve-pr-refs.model.yml
          • endbug_latest-tag.model.yml
          • expo_expo-github-action.model.yml
          • firebaseextended_action-hosting-deploy.model.yml
          • frabert_replace-string-action.model.yml
          • franzdiebold_github-env-vars-action.model.yml
          • gabrielbb_xvfb-action.model.yml
          • game-ci_unity-builder.model.yml
          • game-ci_unity-test-runner.model.yml
          • gautamkrishnar_blog-post-workflow.model.yml
          • getsentry_action-release.model.yml
          • github_codeql-action.model.yml
          • go-semantic-release_action.model.yml
          • golangci_golangci-lint-action.model.yml
          • gonuit_heroku-docker-deploy.model.yml
          • goreleaser_goreleaser-action.model.yml
          • gotson_pull-request-comment-branch.model.yml
          • gr2m_create-or-update-pull-request-action.model.yml
          • gradle_gradle-build-action.model.yml
          • haya14busa_action-cond.model.yml
          • hexlet_project-action.model.yml
          • ilammy_msvc-dev-cmd.model.yml
          • ilammy_setup-nasm.model.yml
          • imjohnbo_issue-bot.model.yml
          • iterative_setup-cml.model.yml
          • iterative_setup-dvc.model.yml
          • jamesives_github-pages-deploy-action.model.yml
          • jitterbit_get-changed-files.model.yml
          • johnnymorganz_stylua-action.model.yml
          • jsdaniell_create-json.model.yml
          • jsmith_changes-since-last-tag.model.yml
          • jurplel_install-qt-action.model.yml
          • jwalton_gh-ecr-push.model.yml
          • kaisugi_action-regex-match.model.yml
          • karpikpl_list-changed-files-action.model.yml
          • khan_pull-request-comment-trigger.model.yml
          • knu_changed-files.model.yml
          • larsoner_circleci-artifacts-redirector-action.model.yml
          • leafo_gh-actions-lua.model.yml
          • leafo_gh-actions-luarocks.model.yml
          • lots0logs_gh-action-get-changed-files.model.yml
          • lucasbento_auto-close-issues.model.yml
          • luizfelipelaviola_parse-plain-dotenv.model.yml
          • mad9000_actions-find-and-replace-string.model.yml
          • magefile_mage-action.model.yml
          • maierj_fastlane-action.model.yml
          • manusa_actions-setup-minikube.model.yml
          • marocchino_on_artifact.model.yml
          • martinhaintz_ga-file-list.model.yml
          • mattdavis0351_actions.model.yml
          • meteorengineer_setup-meteor.model.yml
          • metro-digital_setup-tools-for-waas.model.yml
          • microsoft_setup-msbuild.model.yml
          • mikefarah_yq.model.yml
          • mishakav_pytest-coverage-comment.model.yml
          • mr-smithers-excellent_docker-build-push.model.yml
          • msys2_setup-msys2.model.yml
          • mxschmitt_action-tmate.model.yml
          • mymindstorm_setup-emsdk.model.yml
          • nanasess_setup-chromedriver.model.yml
          • nanasess_setup-php.model.yml
          • nick-fields_retry.model.yml
          • octokit_graphql-action.model.yml
          • octokit_request-action.model.yml
          • olafurpg_setup-scala.model.yml
          • paambaati_codeclimate-action.model.yml
          • paulschuberth_regex-extract-action.model.yml
          • peter-evans_create-pull-request.model.yml
          • peter-murray_issue-body-parser-action.model.yml
          • peter-murray_issue-forms-body-parser.model.yml
          • plasmicapp_plasmic-action.model.yml
          • potiuk_get-workflow-origin.model.yml
          • preactjs_compressed-size-action.model.yml
          • py-actions_flake8.model.yml
          • py-actions_py-dependency-install.model.yml
          • pyo3_maturin-action.model.yml
          • reactivecircus_android-emulator-runner.model.yml
          • read-file-actions.model.yml
          • redhat-plumbers-in-action_download-artifact.model.yml
          • reggionick_s3-deploy.model.yml
          • release-kit_regex.model.yml
          • renovatebot_github-action.model.yml
          • rishabh510_path-lister-action.model.yml
          • roots_issue-closer-action.model.yml
          • ros-tooling_setup-ros.model.yml
          • ruby_setup-ruby.model.yml
          • salsify_action-detect-and-tag-new-version.model.yml
          • sergeysova_jq-action.model.yml
          • shallwefootball_upload-s3-action.model.yml
          • shogo82148_actions-setup-perl.model.yml
          • skitionek_notify-microsoft-teams.model.yml
          • snow-actions_eclint.model.yml
          • stackhawk_hawkscan-action.model.yml
          • step-security_harden-runner.model.yml
          • suisei-cn_actions-download-file.model.yml
          • the-coding-turtle_ga-file-list.model.yml
          • tibdex_backport.model.yml
          • tim-actions_get-pr-commits.model.yml
          • timheuer_base64-to-file.model.yml
          • tj-actions_branch-names.model.yml
          • tmelliottjr_extract-regex-action.model.yml
          • trilom_file-changes-action.model.yml
          • tripss_conventional-changelog-action.model.yml
          • tryghost_action-deploy-theme.model.yml
          • tzkhan_pr-update-action.model.yml
          • veracode_veracode-sca.model.yml
          • w3f_action-find-old-files.model.yml
          • wearerequired_lint-action.model.yml
          • webfactory_ssh-agent.model.yml
          • xom9ikk_dotenv.model.yml
          • xt0rted_pull-request-comment-branch.model.yml
          • yumemi-inc_changed-files.model.yml
          • zaproxy_action-baseline.model.yml
          • zaproxy_action-full-scan.model.yml
          • zentered_issue-forms-body-parser.model.yml
      • ide-contextual-queries
        • printAst.ql
        • printCfg.ql
      • qlpack.yml
    • src
      • Debug
        • SyntaxError.ql
        • partial.ql
      • Models
        • CompositeActionsSinks.ql
        • CompositeActionsSources.ql
        • CompositeActionsSummaries.ql
        • ReusableWorkflowsSinks.ql
        • ReusableWorkflowsSources.ql
        • ReusableWorkflowsSummaries.ql
      • Security
        • CWE-074
          • OutputClobberingHigh.ql
        • CWE-077
          • EnvPathInjectionCritical.md
          • EnvPathInjectionCritical.ql
          • EnvPathInjectionMedium.md
          • EnvPathInjectionMedium.ql
          • EnvVarInjectionCritical.md
          • EnvVarInjectionCritical.ql
          • EnvVarInjectionMedium.md
          • EnvVarInjectionMedium.ql
        • CWE-078
          • CommandInjectionCritical.ql
          • CommandInjectionMedium.ql
        • CWE-088
          • ArgumentInjectionCritical.md
          • ArgumentInjectionCritical.ql
          • ArgumentInjectionMedium.md
          • ArgumentInjectionMedium.ql
        • CWE-094
          • CodeInjectionCritical.md
          • CodeInjectionCritical.ql
          • CodeInjectionMedium.md
          • CodeInjectionMedium.ql
        • CWE-1395
          • UseOfKnownVulnerableAction.md
          • UseOfKnownVulnerableAction.ql
        • CWE-200
          • SecretExfiltration.ql
        • CWE-275
          • MissingActionsPermissions.md
          • MissingActionsPermissions.ql
        • CWE-284
          • CodeExecutionOnSelfHostedRunner.ql
        • CWE-285
          • ImproperAccessControl.md
          • ImproperAccessControl.ql
        • CWE-312
          • ExcessiveSecretsExposure.md
          • ExcessiveSecretsExposure.ql
          • SecretsInArtifacts.md
          • SecretsInArtifacts.ql
          • UnmaskedSecretExposure.md
          • UnmaskedSecretExposure.ql
        • CWE-349
          • CachePoisoningViaCodeInjection.md
          • CachePoisoningViaCodeInjection.ql
          • CachePoisoningViaDirectCache.md
          • CachePoisoningViaDirectCache.ql
          • CachePoisoningViaPoisonableStep.md
          • CachePoisoningViaPoisonableStep.ql
        • CWE-367
          • UntrustedCheckoutTOCTOUCritical.md
          • UntrustedCheckoutTOCTOUCritical.ql
          • UntrustedCheckoutTOCTOUHigh.md
          • UntrustedCheckoutTOCTOUHigh.ql
        • CWE-571
          • ExpressionIsAlwaysTrueCritical.md
          • ExpressionIsAlwaysTrueCritical.ql
          • ExpressionIsAlwaysTrueHigh.md
          • ExpressionIsAlwaysTrueHigh.ql
        • CWE-829
          • ArtifactPoisoningCritical.md
          • ArtifactPoisoningCritical.ql
          • ArtifactPoisoningMedium.md
          • ArtifactPoisoningMedium.ql
          • ArtifactPoisoningPathTraversal.ql
          • UnpinnedActionsTag.md
          • UnpinnedActionsTag.ql
          • UntrustedCheckoutCritical.md
          • UntrustedCheckoutCritical.ql
          • UntrustedCheckoutHigh.md
          • UntrustedCheckoutHigh.ql
          • UntrustedCheckoutMedium.md
          • UntrustedCheckoutMedium.ql
          • UnversionedImmutableAction.md
          • UnversionedImmutableAction.ql
        • CWE-918
          • RequestForgery.ql
      • Violations Of Best Practice/CodeQL
        • UnnecessaryUseOfAdvancedConfig.md
        • UnnecessaryUseOfAdvancedConfig.ql
      • codeql-pack.lock.yml
      • codeql-suites
        • actions-all.qls
        • actions-bughalla.qls
        • actions-code-scanning.qls
        • actions-security-and-quality.qls
        • actions-summaries-queries.qls
      • qlpack.yml
    • test
      • codeql-pack.lock.yml
      • library-tests
        • .github/workflows
          • commands.yml
          • expression_nodes.yml
          • multiline.yml
          • multiline2.yml
          • poisonable_steps.yml
          • shell.yml
          • test.yml
        • commands.expected
        • commands.ql
        • poisonable_steps.expected
        • poisonable_steps.ql
        • test.expected
        • test.ql
        • workflowenum.expected
        • workflowenum.ql
      • qlpack.yml
      • query-tests
        • Models
          • .github/workflows
            • calling_composite.yml
            • calling_workflow.yml
            • reusable_workflow.yml
          • CompositeActionsSinks.expected
          • CompositeActionsSinks.qlref
          • CompositeActionsSources.expected
          • CompositeActionsSources.qlref
          • CompositeActionsSummaries.expected
          • CompositeActionsSummaries.qlref
          • ReusableWorkflowsSinks.expected
          • ReusableWorkflowsSinks.qlref
          • ReusableWorkflowsSources.expected
          • ReusableWorkflowsSources.qlref
          • ReusableWorkflowsSummaries.expected
          • ReusableWorkflowsSummaries.qlref
          • action1
            • action.yml
        • Security
          • CWE-074
            • .github/workflows
              • output1.yml
              • output2.yml
            • OutputClobberingHigh.expected
            • OutputClobberingHigh.qlref
          • CWE-077
            • .github
              • actions
                • download-artifact-2
                  • action.yaml
                • download-artifact
                  • action.yaml
              • workflows
                • artifactpoisoning51.yml
                • artifactpoisoning52.yml
                • artifactpoisoning53.yml
                • artifactpoisoning91.yml
                • artifactpoisoning92.yml
                • path1.yml
                • test1.yml
                • test10.yml
                • test11.yml
                • test12.yml
                • test13.yml
                • test14.yml
                • test15.yml
                • test16.yml
                • test17.yml
                • test18.yml
                • test19.yml
                • test2.yml
                • test3.yml
                • test4.yml
                • test5.yml
                • test6.yml
                • test7.yml
                • test8.yml
                • test9.yml
            • EnvPathInjectionCritical.expected
            • EnvPathInjectionCritical.qlref
            • EnvPathInjectionMedium.expected
            • EnvPathInjectionMedium.qlref
            • EnvVarInjectionCritical.expected
            • EnvVarInjectionCritical.qlref
            • EnvVarInjectionMedium.expected
            • EnvVarInjectionMedium.qlref
          • CWE-078
            • .github
              • actions/run-airbyte-ci
                • action.yaml
              • workflows
                • comment_issue.yml
                • documentation.yml
                • test1.yml
            • CommandInjectionCritical.expected
            • CommandInjectionCritical.qlref
            • CommandInjectionMedium.expected
            • CommandInjectionMedium.qlref
          • CWE-088
            • .github/workflows
              • arg_injection.yml
            • ArgumentInjectionCritical.expected
            • ArgumentInjectionCritical.qlref
            • ArgumentInjectionMedium.expected
            • ArgumentInjectionMedium.qlref
          • CWE-094
            • .github
              • actions
                • action1
                  • action.yml
                • action2
                  • action.yml
                • action3
                  • action.yml
                • action4
                  • action.yml
                • action5
                  • action.yml
                • action6
                  • action.yml
                • action7
                  • action.yml
                • external
                  • TestOrg/TestRepo/.github/actions/clone-repo
                    • action.yaml
                  • ultralytics/actions
                    • action.yaml
              • workflows
                • argus_case_study.yml
                • artifactpoisoning1.yml
                • artifactpoisoning2.yml
                • artifactpoisoning3.yml
                • artifactpoisoning4.yml
                • artifactpoisoning5.yml
                • artifactpoisoning6.yml
                • artifactpoisoning7.yml
                • artifactpoisoning8.yml
                • changed-files.yml
                • comment_issue.yml
                • comment_issue_newline.yml
                • composite-action-caller-1.yml
                • composite-action-caller-2.yml
                • composite-action-caller-3.yml
                • composite-action-caller-4.yml
                • cross1.yml
                • cross2.yml
                • cross3.yml
                • discussion.yml
                • discussion_comment.yml
                • external/TestOrg/TestRepo/.github/workflows
                  • publishResults.yml
                  • reusable-workflow.yml
                • gollum.yml
                • image_link_generator.yml
                • inter-job0.yml
                • inter-job1.yml
                • inter-job2.yml
                • inter-job4.yml
                • inter-job5.yml
                • issues.yaml
                • json_wrap.yml
                • level0.yml
                • level1.yml
                • matrix.yml
                • matrix_flow.yml
                • no-flow1.yml
                • no-flow2.yml
                • output_clobbering1.yml
                • output_clobbering2.yml
                • priv_pull_request.yml
                • pull_request_review.yml
                • pull_request_review_comment.yml
                • pull_request_target.yml
                • push.yml
                • reusable-workflow-1.yml
                • reusable-workflow-2.yml
                • reusable-workflow-caller-1.yml
                • reusable-workflow-caller-2.yml
                • reusable-workflow-caller-3.yml
                • self_needs.yml
                • simple1.yml
                • simple2.yml
                • simple3.yml
                • slash_command1.yml
                • slash_command2.yml
                • sonar-source.yml
                • test.yml
                • test1.yml
                • test10.yml
                • test11.yml
                • test12.yml
                • test13.yml
                • test14.yml
                • test15.yml
                • test16.yml
                • test17.yml
                • test18.yml
                • test19.yml
                • test2.yml
                • test20.yml
                • test21.yml
                • test22.yml
                • test23.yml
                • test24.yml
                • test25.yml
                • test26.yml
                • test27.yml
                • test28.yml
                • test29.yml
                • test3.yml
                • test4.yml
                • test5.yml
                • test6.yml
                • test7.yml
                • test8.yml
                • test9.yml
                • untrusted_checkout1.yml
                • workflow_run.yml
                • workflow_run_branches1.yml
                • workflow_run_branches2.yml
                • workflow_run_branches3.yml
                • workflow_run_branches4.yml
                • workflow_run_branches5.yml
            • CodeInjectionCritical.expected
            • CodeInjectionCritical.qlref
            • CodeInjectionMedium.expected
            • CodeInjectionMedium.qlref
          • CWE-1395
            • .github/workflows
              • test1.yml
            • UseOfKnownVulnerableAction.expected
            • UseOfKnownVulnerableAction.qlref
          • CWE-200
            • .github/workflows
              • test1.yml
            • SecretExfiltration.expected
            • SecretExfiltration.qlref
          • CWE-275
            • .github/workflows
              • perms1.yml
              • perms2.yml
              • perms3.yml
              • perms4.yml
              • perms5.yml
            • MissingActionsPermissions.expected
            • MissingActionsPermissions.qlref
          • CWE-284
            • .github/workflows
              • test1.yml
              • test2.yml
            • CodeExecutionOnSelfHostedRunner.expected
            • CodeExecutionOnSelfHostedRunner.qlref
          • CWE-285
            • .github/workflows
              • test1.yml
              • test2.yml
            • ImproperAccessControl.expected
            • ImproperAccessControl.qlref
          • CWE-312
            • .github/workflows
              • neg_test1.yml
              • secrets-in-artifacts.yml
              • test1.yml
            • ExcessiveSecretsExposure.expected
            • ExcessiveSecretsExposure.qlref
            • SecretsInArtifacts.expected
            • SecretsInArtifacts.qlref
            • UnmaskedSecretExposure.expected
            • UnmaskedSecretExposure.qlref
          • CWE-349
            • .github/workflows
              • code_injection1.yml
              • code_injection2.yml
              • direct_cache1.yml
              • direct_cache2.yml
              • direct_cache3.yml
              • direct_cache4.yml
              • direct_cache5.yml
              • direct_cache6.yml
              • neg_code_injection1.yml
              • neg_direct_cache1.yml
              • neg_direct_cache2.yml
              • neg_direct_cache3.yml
              • neg_direct_cache4.yml
              • neg_direct_cache5.yml
              • neg_poisonable_step1.yml
              • neg_poisonable_step2.yml
              • poisonable_step1.yml
              • poisonable_step2.yml
              • poisonable_step3.yml
              • poisonable_step4.yml
              • poisonable_step5.yml
            • CachePoisoningViaCodeInjection.expected
            • CachePoisoningViaCodeInjection.qlref
            • CachePoisoningViaDirectCache.expected
            • CachePoisoningViaDirectCache.qlref
            • CachePoisoningViaPoisonableStep.expected
            • CachePoisoningViaPoisonableStep.qlref
          • CWE-367
            • .github/workflows
              • actor.yml
              • comment.yml
              • deployment1.yml
              • deployment2.yml
              • label.yml
              • label_actor.yml
              • test0.yml
              • test1.yml
              • test2.yml
              • test3.yml
              • test4.yml
              • test5.yml
              • test6.yml
            • UntrustedCheckoutTOCTOUCritical.expected
            • UntrustedCheckoutTOCTOUCritical.qlref
            • UntrustedCheckoutTOCTOUHigh.expected
            • UntrustedCheckoutTOCTOUHigh.qlref
          • CWE-571
            • .github/workflows
              • test1.yml
              • test2.yml
            • ExpressionIsAlwaysTrueCritical.expected
            • ExpressionIsAlwaysTrueCritical.qlref
            • ExpressionIsAlwaysTrueHigh.expected
            • ExpressionIsAlwaysTrueHigh.qlref
          • CWE-829
            • .github
              • actions
                • dangerous-git-checkout
                  • action.yml
                • download-artifact-2
                  • action.yaml
                • download-artifact
                  • action.yaml
              • workflows
                • actor_trusted_checkout.yml
                • artifactpoisoning101.yml
                • artifactpoisoning11.yml
                • artifactpoisoning12.yml
                • artifactpoisoning21.yml
                • artifactpoisoning22.yml
                • artifactpoisoning31.yml
                • artifactpoisoning32.yml
                • artifactpoisoning33.yml
                • artifactpoisoning34.yml
                • artifactpoisoning41.yml
                • artifactpoisoning42.yml
                • artifactpoisoning51.yml
                • artifactpoisoning52.yml
                • artifactpoisoning53.yml
                • artifactpoisoning71.yml
                • artifactpoisoning81.yml
                • artifactpoisoning82.yml
                • artifactpoisoning91.yml
                • artifactpoisoning92.yml
                • auto_ci.yml
                • dependabot1.yml
                • dependabot2.yml
                • dependabot3.yml
                • external/TestOrg/TestRepo/.github/workflows
                  • formal.yml
                  • reusable.yml
                • formal.yml
                • gitcheckout.yml
                • issue_comment_3rd_party_action.yml
                • issue_comment_direct.yml
                • issue_comment_heuristic.yml
                • issue_comment_octokit.yml
                • issue_comment_octokit2.yml
                • label_trusted_checkout1.yml
                • label_trusted_checkout2.yml
                • level0.yml
                • mend.yml
                • poc.yml
                • poc2.yml
                • poc3.yml
                • pr-workflow-fork.yaml
                • pr-workflow.yml
                • priv_pull_request_checkout.yml
                • resolve-args.yml
                • reusable_caller1.yaml
                • reusable_caller2.yaml
                • reusable_caller3.yaml
                • reusable_local.yml
                • test.yml
                • test1.yml
                • test10.yml
                • test11.yml
                • test12.yml
                • test13.yml
                • test14.yml
                • test15.yml
                • test16.yml
                • test17.yml
                • test18.yml
                • test19.yml
                • test2.yml
                • test20.yml
                • test21.yml
                • test22.yml
                • test23.yml
                • test24.yml
                • test25.yml
                • test26.yml
                • test27.yml
                • test28.yml
                • test29.yml
                • test3.yml
                • test4.yml
                • test5.yml
                • test6.yml
                • test7.yml
                • test8.yml
                • test9.yml
                • unpinned_tags.yml
                • untrusted_checkout.yml
                • untrusted_checkout2.yml
                • untrusted_checkout3.yml
                • untrusted_checkout4.yml
                • untrusted_checkout_5.yml
                • untrusted_checkout_6.yml
                • workflow_run_untrusted_checkout.yml
                • workflow_run_untrusted_checkout_2.yml
                • workflow_run_untrusted_checkout_3.yml
            • ArtifactPoisoningCritical.expected
            • ArtifactPoisoningCritical.qlref
            • ArtifactPoisoningMedium.expected
            • ArtifactPoisoningMedium.qlref
            • ArtifactPoisoningPathTraversal.expected
            • ArtifactPoisoningPathTraversal.qlref
            • UnpinnedActionsTag.expected
            • UnpinnedActionsTag.qlref
            • UntrustedCheckoutCritical.expected
            • UntrustedCheckoutCritical.qlref
            • UntrustedCheckoutHigh.expected
            • UntrustedCheckoutHigh.qlref
            • UntrustedCheckoutMedium.expected
            • UntrustedCheckoutMedium.qlref
            • UnversionedImmutableAction.expected
            • UnversionedImmutableAction.qlref
          • CWE-918
            • .github/workflows
              • test.yml
            • RequestForgery.expected
            • RequestForgery.qlref
        • SyntaxError
          • .github/workflows
            • malformed.yml
          • SyntaxError.expected
          • SyntaxError.qlref
          • options
        • Violations Of Best Practice/CodeQL
          • .github/workflows
            • defaultable_workflow.yml
            • should_be_using_advanced_setup.yml
          • UnnecessaryUseOfAdvancedConfig.expected
          • UnnecessaryUseOfAdvancedConfig.qlref
• codeql-workspace.yml