Skip to content

Commit 62d9302

Browse files
author
Alvaro Muñoz
committed
chore: remove leftover commented out code
1 parent e34835f commit 62d9302

1 file changed

Lines changed: 0 additions & 7 deletions

File tree

ql/lib/codeql/actions/security/UntrustedCheckoutQuery.qll

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,6 @@ string checkoutTriggers() {
1313
*/
1414
private module ActionsMutableRefCheckoutConfig implements DataFlow::ConfigSig {
1515
predicate isSource(DataFlow::Node source) {
16-
//source.asExpr().getATriggerEvent().getName() = checkoutTriggers() and
1716
(
1817
// remote flow sources
1918
source instanceof ArtifactSource
@@ -209,7 +208,6 @@ abstract class SHACheckoutStep extends PRHeadCheckoutStep { }
209208
class ActionsMutableRefCheckout extends MutableRefCheckoutStep instanceof UsesStep {
210209
ActionsMutableRefCheckout() {
211210
this.getCallee() = "actions/checkout" and
212-
//this.getEnclosingJob().getATriggerEvent().getName() = checkoutTriggers() and
213211
(
214212
exists(
215213
ActionsMutableRefCheckoutFlow::PathNode source, ActionsMutableRefCheckoutFlow::PathNode sink
@@ -242,7 +240,6 @@ class ActionsMutableRefCheckout extends MutableRefCheckoutStep instanceof UsesSt
242240
class ActionsSHACheckout extends SHACheckoutStep instanceof UsesStep {
243241
ActionsSHACheckout() {
244242
this.getCallee() = "actions/checkout" and
245-
//this.getEnclosingJob().getATriggerEvent().getName() = checkoutTriggers() and
246243
(
247244
exists(ActionsSHACheckoutFlow::PathNode source, ActionsSHACheckoutFlow::PathNode sink |
248245
ActionsSHACheckoutFlow::flowPath(source, sink) and
@@ -273,7 +270,6 @@ class ActionsSHACheckout extends SHACheckoutStep instanceof UsesStep {
273270
class GitMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
274271
GitMutableRefCheckout() {
275272
exists(string cmd | this.getScript().getACommand() = cmd |
276-
//this.getATriggerEvent().getName() = checkoutTriggers() and
277273
cmd.regexpMatch("git\\s+(fetch|pull).*") and
278274
(
279275
(containsHeadRef(cmd) or containsPullRequestNumber(cmd))
@@ -297,7 +293,6 @@ class GitMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
297293
class GitSHACheckout extends SHACheckoutStep instanceof Run {
298294
GitSHACheckout() {
299295
exists(string cmd | this.getScript().getACommand() = cmd |
300-
//this.getATriggerEvent().getName() = checkoutTriggers() and
301296
cmd.regexpMatch("git\\s+(fetch|pull).*") and
302297
(
303298
containsHeadSHA(cmd)
@@ -318,7 +313,6 @@ class GitSHACheckout extends SHACheckoutStep instanceof Run {
318313
class GhMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
319314
GhMutableRefCheckout() {
320315
exists(string cmd | this.getScript().getACommand() = cmd |
321-
//this.getATriggerEvent().getName() = checkoutTriggers() and
322316
cmd.regexpMatch(".*(gh|hub)\\s+pr\\s+checkout.*") and
323317
(
324318
(containsHeadRef(cmd) or containsPullRequestNumber(cmd))
@@ -341,7 +335,6 @@ class GhMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
341335
class GhSHACheckout extends SHACheckoutStep instanceof Run {
342336
GhSHACheckout() {
343337
exists(string cmd | this.getScript().getACommand() = cmd |
344-
//this.getATriggerEvent().getName() = checkoutTriggers() and
345338
cmd.regexpMatch("gh\\s+pr\\s+checkout.*") and
346339
(
347340
containsHeadSHA(cmd)

0 commit comments

Comments
 (0)