@@ -13,7 +13,6 @@ string checkoutTriggers() {
1313 */
1414private module ActionsMutableRefCheckoutConfig implements DataFlow:: ConfigSig {
1515 predicate isSource ( DataFlow:: Node source ) {
16- //source.asExpr().getATriggerEvent().getName() = checkoutTriggers() and
1716 (
1817 // remote flow sources
1918 source instanceof ArtifactSource
@@ -209,7 +208,6 @@ abstract class SHACheckoutStep extends PRHeadCheckoutStep { }
209208class ActionsMutableRefCheckout extends MutableRefCheckoutStep instanceof UsesStep {
210209 ActionsMutableRefCheckout ( ) {
211210 this .getCallee ( ) = "actions/checkout" and
212- //this.getEnclosingJob().getATriggerEvent().getName() = checkoutTriggers() and
213211 (
214212 exists (
215213 ActionsMutableRefCheckoutFlow:: PathNode source , ActionsMutableRefCheckoutFlow:: PathNode sink
@@ -242,7 +240,6 @@ class ActionsMutableRefCheckout extends MutableRefCheckoutStep instanceof UsesSt
242240class ActionsSHACheckout extends SHACheckoutStep instanceof UsesStep {
243241 ActionsSHACheckout ( ) {
244242 this .getCallee ( ) = "actions/checkout" and
245- //this.getEnclosingJob().getATriggerEvent().getName() = checkoutTriggers() and
246243 (
247244 exists ( ActionsSHACheckoutFlow:: PathNode source , ActionsSHACheckoutFlow:: PathNode sink |
248245 ActionsSHACheckoutFlow:: flowPath ( source , sink ) and
@@ -273,7 +270,6 @@ class ActionsSHACheckout extends SHACheckoutStep instanceof UsesStep {
273270class GitMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
274271 GitMutableRefCheckout ( ) {
275272 exists ( string cmd | this .getScript ( ) .getACommand ( ) = cmd |
276- //this.getATriggerEvent().getName() = checkoutTriggers() and
277273 cmd .regexpMatch ( "git\\s+(fetch|pull).*" ) and
278274 (
279275 ( containsHeadRef ( cmd ) or containsPullRequestNumber ( cmd ) )
@@ -297,7 +293,6 @@ class GitMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
297293class GitSHACheckout extends SHACheckoutStep instanceof Run {
298294 GitSHACheckout ( ) {
299295 exists ( string cmd | this .getScript ( ) .getACommand ( ) = cmd |
300- //this.getATriggerEvent().getName() = checkoutTriggers() and
301296 cmd .regexpMatch ( "git\\s+(fetch|pull).*" ) and
302297 (
303298 containsHeadSHA ( cmd )
@@ -318,7 +313,6 @@ class GitSHACheckout extends SHACheckoutStep instanceof Run {
318313class GhMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
319314 GhMutableRefCheckout ( ) {
320315 exists ( string cmd | this .getScript ( ) .getACommand ( ) = cmd |
321- //this.getATriggerEvent().getName() = checkoutTriggers() and
322316 cmd .regexpMatch ( ".*(gh|hub)\\s+pr\\s+checkout.*" ) and
323317 (
324318 ( containsHeadRef ( cmd ) or containsPullRequestNumber ( cmd ) )
@@ -341,7 +335,6 @@ class GhMutableRefCheckout extends MutableRefCheckoutStep instanceof Run {
341335class GhSHACheckout extends SHACheckoutStep instanceof Run {
342336 GhSHACheckout ( ) {
343337 exists ( string cmd | this .getScript ( ) .getACommand ( ) = cmd |
344- //this.getATriggerEvent().getName() = checkoutTriggers() and
345338 cmd .regexpMatch ( "gh\\s+pr\\s+checkout.*" ) and
346339 (
347340 containsHeadSHA ( cmd )
0 commit comments