@@ -24,26 +24,26 @@ The CodeQL library for GitHub Actions exposes the following extensible predicate
2424
2525Customizing data flow and taint tracking:
2626
27- - ** actionsSourceModel ** \ ( action, version, output, kind, provenance)
28- - ** actionsSinkModel ** \ ( action, version, input, kind, provenance)
29- - ** actionsSummaryModel ** \ ( action, version, input, output, kind, provenance)
27+ - `` actionsSourceModel(action, version, output, kind, provenance) ``
28+ - `` actionsSinkModel(action, version, input, kind, provenance) ``
29+ - `` actionsSummaryModel(action, version, input, output, kind, provenance) ``
3030
3131Customizing Actions-specific analysis:
3232
33- - ** argumentInjectionSinksDataModel ** \ ( regexp, command_group, argument_group)
34- - ** contextTriggerDataModel ** \ ( trigger, context_prefix)
35- - ** externallyTriggerableEventsDataModel ** \ ( event)
36- - ** immutableActionsDataModel ** \ ( action)
37- - ** poisonableActionsDataModel ** \ ( action)
38- - ** poisonableCommandsDataModel ** \ ( regexp)
39- - ** poisonableLocalScriptsDataModel ** \ ( regexp, group)
40- - ** repositoryDataModel ** \ ( visibility, default_branch_name)
41- - ** trustedActionsOwnerDataModel ** \ ( owner)
42- - ** untrustedEventPropertiesDataModel ** \ ( property, kind)
43- - ** untrustedGhCommandDataModel ** \ ( cmd_regex, flag)
44- - ** untrustedGitCommandDataModel ** \ ( cmd_regex, flag)
45- - ** vulnerableActionsDataModel ** \ ( action, vulnerable_version, vulnerable_sha, fixed_version)
46- - ** workflowDataModel ** \ ( path, trigger, job, secrets_source, permissions, runner)
33+ - `` argumentInjectionSinksDataModel(regexp, command_group, argument_group) ``
34+ - `` contextTriggerDataModel(trigger, context_prefix) ``
35+ - `` externallyTriggerableEventsDataModel(event) ``
36+ - `` immutableActionsDataModel(action) ``
37+ - `` poisonableActionsDataModel(action) ``
38+ - `` poisonableCommandsDataModel(regexp) ``
39+ - `` poisonableLocalScriptsDataModel(regexp, group) ``
40+ - `` repositoryDataModel(visibility, default_branch_name) ``
41+ - `` trustedActionsOwnerDataModel(owner) ``
42+ - `` untrustedEventPropertiesDataModel(property, kind) ``
43+ - `` untrustedGhCommandDataModel(cmd_regex, flag) ``
44+ - `` untrustedGitCommandDataModel(cmd_regex, flag) ``
45+ - `` vulnerableActionsDataModel(action, vulnerable_version, vulnerable_sha, fixed_version) ``
46+ - `` workflowDataModel(path, trigger, job, secrets_source, permissions, runner) ``
4747
4848Examples of custom model definitions
4949------------------------------------
@@ -62,9 +62,9 @@ To allow any Action from the publisher ``octodemo``, such as ``octodemo/3rd-part
6262 .. code-block :: yaml
6363
6464 extensions :
65- - addsTo :
65+ - addsTo :
6666 pack : codeql/actions-all
67- extensible : trustedActionsOwnerDataModel
67+ extensible : trustedActionsOwnerDataModel
6868 data :
6969 - ["octodemo"]
7070
0 commit comments