github / github/codeql

Are the Actions model files in ext/manual and ext/generated actively used and maintained?

未关闭
#21,570 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
question
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

The model files under [actions/ql/lib/ext/manual/](https://github.com/github/codeql/tree/main/actions/ql/lib/ext/manual) and [actions/ql/lib/ext/generated/](https://github.com/github/codeql/tree/main/actions/ql/lib/ext/generated) define threat models for various GitHub Actions. Are these models used by any non-experimental queries? Why haven't these models been updated in ~2 years?

贡献指南

打开贡献指南

调研方向

Start by reviewing the model files under actions/ql/lib/ext/manual/ and actions/ql/lib/ext/generated/. Determine whether non-experimental queries use these GitHub Actions models and investigate why they have not been updated in about two years; the work is done when their usage and maintenance status are documented.

由索引模型根据 Issue 内容生成。

评估

技术栈
github-actions
领域
security
Issue 类型
文档
难度
4/5
预计耗时
3-5 天
活跃度
冷清
描述清晰度
需要澄清
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。