Andrew Eisenberg 4164096c0d Use the version from package.json in the runner ...

Update the ql queries to account for change in how we look for runner

Previously, we guarded blocks of code to be run by the runner or the
action using if statements like this:

```js
if (mode === "actions") ...
```

We are no longer doing this. And now, the `unguarded-action-lib.ql`
query is out of date. This query checks that runner code does not
unintentionally access actions-only methods in the libraries.

With these changes, we now ensure that code scanning is happy.

2021-05-31 09:34:41 -07:00

..

binary-planting.ql

Add a query to detect binary planting vulnerabilities.

2020-11-20 11:34:33 +00:00

import-action-entrypoint.ql

fix: small typo in import-action-entrypoint.ql

2020-11-10 00:38:46 +01:00

inconsistent-action-input.ql

Add queries

2020-09-15 18:33:37 +01:00

qlpack.yml

Initial commit (from f5274cbdce4ae7c9e4b937dcdf95ac70ae436d5f)

2020-04-28 17:23:37 +02:00

required-action-input.ql

add explanation to query

2020-09-16 11:03:19 +01:00

undeclared-action-input.ql

fix undeclared action inputs

2020-07-16 14:54:15 +01:00

unguarded-action-lib.ql

Use the version from package.json in the runner

2021-05-31 09:34:41 -07:00