feat: show trigger event on query results

Author: Alvaro Muñoz

ql/src/Security/CWE-077/EnvPathInjectionCritical.ql

@@ -35,5 +35,5 @@ where
     sink.getNode() instanceof EnvPathInjectionFromFileReadSink
   )
 select sink.getNode(), source, sink,
-  "Potential PATH environment variable injection in $@, which may be controlled by an external user.",
-  sink, sink.getNode().toString()
+  "Potential PATH environment variable injection in $@, which may be controlled by an external user ($@).",
+  sink, sink.getNode().toString(), event, event.getName()

ql/src/Security/CWE-077/EnvVarInjectionCritical.ql

@@ -44,5 +44,5 @@ where
     )
   )
 select sink.getNode(), source, sink,
-  "Potential environment variable injection in $@, which may be controlled by an external user.",
-  sink, sink.getNode().toString()
+  "Potential environment variable injection in $@, which may be controlled by an external user ($@).",
+  sink, sink.getNode().toString(), event, event.getName()

ql/src/Security/CWE-078/CommandInjectionCritical.ql

@@ -26,5 +26,5 @@ where
     check.protects(sink.getNode().asExpr(), event, ["command-injection", "code-injection"])
   )
 select sink.getNode(), source, sink,
-  "Potential command injection in $@, which may be controlled by an external user.", sink,
-  sink.getNode().asExpr().(Expression).getRawExpression()
+  "Potential command injection in $@, which may be controlled by an external user ($@).", sink,
+  sink.getNode().asExpr().(Expression).getRawExpression(), event, event.getName()

ql/src/Security/CWE-088/ArgumentInjectionCritical.ql

@@ -25,5 +25,5 @@ where
     check.protects(sink.getNode().asExpr(), event, "argument-injection")
   )
 select sink.getNode(), source, sink,
-  "Potential argument injection in $@ command, which may be controlled by an external user.", sink,
-  sink.getNode().(ArgumentInjectionSink).getCommand()
+  "Potential argument injection in $@ command, which may be controlled by an external user ($@).",
+  sink, sink.getNode().(ArgumentInjectionSink).getCommand(), event, event.getName()

ql/src/Security/CWE-094/CodeInjectionCritical.ql

@@ -33,5 +33,4 @@ where
   )
 select sink.getNode(), source, sink,
   "Potential code injection in $@, which may be controlled by an external user ($@).", sink,
-  sink.getNode().asExpr().(Expression).getRawExpression(), event,
-  event.getLocation().getFile().toString()
+  sink.getNode().asExpr().(Expression).getRawExpression(), event, event.getName()

ql/src/Security/CWE-349/CachePoisoningViaCodeInjection.ql

@@ -44,5 +44,5 @@ where
     )
   )
 select sink.getNode(), source, sink,
-  "Unprivileged code injection in $@, which may lead to cache poisoning.", sink,
-  sink.getNode().asExpr().(Expression).getRawExpression()
+  "Unprivileged code injection in $@, which may lead to cache poisoning ($@).", sink,
+  sink.getNode().asExpr().(Expression).getRawExpression(), event, event.getName()

ql/src/Security/CWE-349/CachePoisoningViaPoisonableStep.ql

@@ -58,4 +58,5 @@ where
   // excluding privileged workflows since they can be exploited in easier circumstances
   not job.isPrivileged()
 select step, source, step,
-  "Potential cache poisoning in the context of the default branch " + message
+  "Potential cache poisoning in the context of the default branch " + message + " ($@).", event,
+  event.getName()

ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql

@@ -28,4 +28,5 @@ where
   exists(ControlCheck check1 | check1.protects(checkout, event, "untrusted-checkout")) and
   not exists(ControlCheck check2 | check2.protects(checkout, event, "untrusted-checkout-toctou"))
 select step, checkout, step,
-  "Insufficient protection against execution of untrusted code on a privileged workflow."
+  "Insufficient protection against execution of untrusted code on a privileged workflow ($@).",
+  event, event.getName()

ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql

@@ -26,4 +26,5 @@ where
   exists(ControlCheck check1 | check1.protects(checkout, event, "untrusted-checkout")) and
   not exists(ControlCheck check2 | check2.protects(checkout, event, "untrusted-checkout-toctou"))
 select checkout,
-  "Insufficient protection against execution of untrusted code on a privileged workflow."
+  "Insufficient protection against execution of untrusted code on a privileged workflow ($@).",
+  event, event.getName()

ql/src/Security/CWE-829/ArtifactPoisoningCritical.ql

@@ -24,5 +24,5 @@ where
     check.protects(sink.getNode().asExpr(), event, "artifact-poisoning")
   )
 select sink.getNode(), source, sink,
-  "Potential artifact poisoning in $@, which may be controlled by an external user.", sink,
-  sink.getNode().toString()
+  "Potential artifact poisoning in $@, which may be controlled by an external user ($@).", sink,
+  sink.getNode().toString(), event, event.getName()