github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 17:41:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Default setup env vars: Restrict results to src

Browse Source
This commit is contained in:
Henry Mercer
2026-05-18 17:15:30 +01:00
parent 4fc0f3e51b
commit 6f8805e224
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
queries/default-setup-environment-variables.ql
View File

@@ -43,6 +43,7 @@ predicate envVarRead(DataFlow::Node node, string envVar) {
from DataFlow::Node read, string envVar from DataFlow::Node read, string envVar
where where
envVarRead(read, envVar) and envVarRead(read, envVar) and
read.getFile().getRelativePath().matches("src/%") and
not read.getFile().getBaseName().matches("%.test.ts") and not read.getFile().getBaseName().matches("%.test.ts") and
not isSafeForDefaultSetup(envVar) not isSafeForDefaultSetup(envVar)
select read, select read,