GitHub Actions queries for CodeQL analysis

Explore the queries that CodeQL uses to analyze workflows used by GitHub Actions when you select the default or the security-extended query suite.

Quem pode usar esse recurso?

O CodeQL está disponível para os seguintes tipos de repositórios:

CodeQL includes many queries for analyzing workflows used by GitHub Actions. Todas as consultas no conjunto de consultas default são executadas por padrão. Se você optar por usar o conjunto de consultas security-extended, consultas adicionais serão executadas. Para saber mais, confira Conjuntos de consultas CodeQL.

Built-in queries for workflow analysis

Esta tabela lista as consultas disponíveis com a versão mais recente da ação CodeQL e CodeQL CLI. Para obter mais informações, consulte Logs de alterações do CodeQL no site de documentação do CodeQL .

Query nameRelated CWEsDefaultExtendedCopilot Autofix
Artifact poisoning829
Cache Poisoning via caching of untrusted files349
Cache Poisoning via execution of untrusted code349
Cache Poisoning via low-privileged code injection349, 094
Checkout of untrusted code in a privileged context829
Checkout of untrusted code in trusted context829
Code injection094, 095, 116
Environment variable built from user-controlled sources077, 020
Excessive Secrets Exposure312
Improper Access Control285
PATH environment variable built from user-controlled sources077, 020
Storage of sensitive information in GitHub Actions artifact312
Unmasked Secret Exposure312
Untrusted Checkout TOCTOU367
Untrusted Checkout TOCTOU367
Use of a known vulnerable action1395
Workflow does not contain permissions275
Artifact poisoning829
Checkout of untrusted code in trusted context829
Code injection094, 095, 116
Environment variable built from user-controlled sources077, 020
PATH environment variable built from user-controlled sources077, 020
Unpinned tag for a non-immutable Action in workflow829