16 Commits

Author	SHA1	Message	Date
Robert	8207018b75	make query more robust	2021-04-23 10:01:28 +01:00
Robert	8c91ba83e2	Introduce our own toolcache implementation for use by the runnner	2021-04-22 15:31:15 +01:00
Robert	378f30f95d	call setupActionsVars in the tests too	2021-03-16 13:43:28 +00:00
Robert	d698cb3d2b	Make unguarded-action-lib better at ignoring uses of toolcache	2021-03-16 13:14:17 +00:00
Chris Gavin	b03b9fe641	Add a query to detect binary planting vulnerabilities.	2020-11-20 11:34:33 +00:00
0xflotus	1870040fac	fix: small typo in import-action-entrypoint.ql	2020-11-10 00:38:46 +01:00
Robert Brignull	090a7013dd	add explanation to query	2020-09-16 11:03:19 +01:00
Robert Brignull	d88fa5cef6	Add queries	2020-09-15 18:33:37 +01:00
Robert Brignull	b4d142e980	whitelist @actions/exec/lib/toolrunner	2020-09-01 14:44:38 +01:00
Robert Brignull	217483dfd6	Convert rest of the actions	2020-08-26 16:20:36 +01:00
Robert Brignull	09677dada5	rename CLI to runner	2020-08-25 17:44:30 +01:00
Robert Brignull	f92a68048c	add query to detect use of actions libs	2020-08-17 12:32:22 +01:00
Robert Brignull	c7c1aa8045	fix undeclared action inputs	2020-07-16 14:54:15 +01:00
Robert Brignull	dcd81b5847	Make use of getContainer	2020-05-04 15:16:23 +01:00
Robert	d90fca396a	Create undeclared-action-input.ql	2020-05-04 14:16:59 +01:00
anaarmas	28ccc3db2d	Initial commit (from f5274cbdce4ae7c9e4b937dcdf95ac70ae436d5f)	2020-04-28 17:23:37 +02:00