Are the Actions model files in ext/manual and ext/generated actively used and maintained?
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
The model files under [actions/ql/lib/ext/manual/](https://github.com/github/codeql/tree/main/actions/ql/lib/ext/manual) and [actions/ql/lib/ext/generated/](https://github.com/github/codeql/tree/main/actions/ql/lib/ext/generated) define threat models for various GitHub Actions. Are these models used by any non-experimental queries? Why haven't these models been updated in ~2 years?
Beitragsleitfaden
Rechercherichtung
Start by reviewing the model files under actions/ql/lib/ext/manual/ and actions/ql/lib/ext/generated/. Determine whether non-experimental queries use these GitHub Actions models and investigate why they have not been updated in about two years; the work is done when their usage and maintenance status are documented.
Vom Indexierungsmodell aus dem Issue-Text verfasst.
Bewertung
- Tech-Stack
- github-actions
- Bereich
- security
- Issue-Typ
- Dokumentation
- Schwierigkeit
- 4/5
- Geschätzter Aufwand
- 3-5 Tage
- Aktivitätsstatus
- Ruhig
- Klarheit
- Muss geklärt werden
- Anfängerfreundlichkeit
- 35/100