Merge pull request #47 from GitHubSecurityLab/ca-rw-summaries-sources

CA RW summaries and sources

Author: Alvaro Muñoz

ql/lib/ext/generated/composite-actions/actions_actions-runner-controller.model.yml

@@ -3,12 +3,12 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["actions/actions-runner-controller", "*", "inputs.image-tag", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.image-name", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.arc-controller-namespace", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.arc-namespace", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.arc-name", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.repo-name", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.repo-owner", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.workflow-file", "code-injection", "generated"]
-     - ["actions/actions-runner-controller", "*", "inputs.auth-token", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.image-tag", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.image-name", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.arc-controller-namespace", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.arc-namespace", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.arc-name", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.repo-name", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.repo-owner", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.workflow-file", "code-injection", "generated"]
+     - ["actions/actions-runner-controller", "*", "input.auth-token", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/adap_flower.model.yml

@@ -3,7 +3,7 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["adap/flower", "*", "inputs.poetry-version", "code-injection", "generated"]
-     - ["adap/flower", "*", "inputs.setuptools-version", "code-injection", "generated"]
-     - ["adap/flower", "*", "inputs.pip-version", "code-injection", "generated"]
-     - ["adap/flower", "*", "inputs.python-version", "code-injection", "generated"]
+     - ["adap/flower", "*", "input.poetry-version", "code-injection", "generated"]
+     - ["adap/flower", "*", "input.setuptools-version", "code-injection", "generated"]
+     - ["adap/flower", "*", "input.pip-version", "code-injection", "generated"]
+     - ["adap/flower", "*", "input.python-version", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/agoric_agoric-sdk.model.yml

@@ -3,9 +3,9 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["agoric/agoric-sdk", "*", "inputs.xsnap-random-init", "code-injection", "generated"]
-     - ["agoric/agoric-sdk", "*", "inputs.path", "code-injection", "generated"]
-     - ["agoric/agoric-sdk", "*", "inputs.ignore-endo-branch", "code-injection", "generated"]
-     - ["agoric/agoric-sdk", "*", "inputs.codecov-token", "code-injection", "generated"]
-     - ["agoric/agoric-sdk", "*", "inputs.datadog-token", "code-injection", "generated"]
-     - ["agoric/agoric-sdk", "*", "inputs.datadog-site", "code-injection", "generated"]
+     - ["agoric/agoric-sdk", "*", "input.xsnap-random-init", "code-injection", "generated"]
+     - ["agoric/agoric-sdk", "*", "input.path", "code-injection", "generated"]
+     - ["agoric/agoric-sdk", "*", "input.ignore-endo-branch", "code-injection", "generated"]
+     - ["agoric/agoric-sdk", "*", "input.codecov-token", "code-injection", "generated"]
+     - ["agoric/agoric-sdk", "*", "input.datadog-token", "code-injection", "generated"]
+     - ["agoric/agoric-sdk", "*", "input.datadog-site", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/airbnb_lottie-ios.model.yml

@@ -3,4 +3,4 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["airbnb/lottie-ios", "*", "inputs.xcode", "code-injection", "generated"]
+     - ["airbnb/lottie-ios", "*", "input.xcode", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/airbytehq_airbyte.model.yml

@@ -3,5 +3,5 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["airbytehq/airbyte", "*", "inputs.options", "code-injection", "generated"]
-     - ["airbytehq/airbyte", "*", "inputs.subcommand", "code-injection", "generated"]
+     - ["airbytehq/airbyte", "*", "input.options", "code-injection", "generated"]
+     - ["airbytehq/airbyte", "*", "input.subcommand", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/amazon-ion_ion-java.model.yml

@@ -3,5 +3,5 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["amazon-ion/ion-java", "*", "inputs.project_version", "code-injection", "generated"]
-     - ["amazon-ion/ion-java", "*", "inputs.repo", "code-injection", "generated"]
+     - ["amazon-ion/ion-java", "*", "input.project_version", "code-injection", "generated"]
+     - ["amazon-ion/ion-java", "*", "input.repo", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/anchore_grype.model.yml

@@ -3,4 +3,4 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["anchore/grype", "*", "inputs.bootstrap-apt-packages", "code-injection", "generated"]
+     - ["anchore/grype", "*", "input.bootstrap-apt-packages", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/anchore_syft.model.yml

@@ -3,4 +3,4 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["anchore/syft", "*", "inputs.bootstrap-apt-packages", "code-injection", "generated"]
+     - ["anchore/syft", "*", "input.bootstrap-apt-packages", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/angular_dev-infra.model.yml

@@ -3,8 +3,8 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["angular/dev-infra", "*", "inputs.firebase-public-dir", "code-injection", "generated"]
-     - ["angular/dev-infra", "*", "inputs.workflow-artifact-name", "code-injection", "generated"]
-     - ["angular/dev-infra", "*", "inputs.artifact-build-revision", "code-injection", "generated"]
-     - ["angular/dev-infra", "*", "inputs.pull-number", "code-injection", "generated"]
-     - ["angular/dev-infra", "*", "inputs.deploy-directory", "code-injection", "generated"]
+     - ["angular/dev-infra", "*", "input.firebase-public-dir", "code-injection", "generated"]
+     - ["angular/dev-infra", "*", "input.workflow-artifact-name", "code-injection", "generated"]
+     - ["angular/dev-infra", "*", "input.artifact-build-revision", "code-injection", "generated"]
+     - ["angular/dev-infra", "*", "input.pull-number", "code-injection", "generated"]
+     - ["angular/dev-infra", "*", "input.deploy-directory", "code-injection", "generated"]

ql/lib/ext/generated/composite-actions/ansible_ansible-lint.model.yml

@@ -3,5 +3,5 @@ extensions:
       pack: githubsecuritylab/actions-all
       extensible: sinkModel
     data:
-     - ["ansible/ansible-lint", "*", "inputs.args", "code-injection", "generated"]
-     - ["ansible/ansible-lint", "*", "inputs.working_directory", "code-injection", "generated"]
+     - ["ansible/ansible-lint", "*", "input.args", "code-injection", "generated"]
+     - ["ansible/ansible-lint", "*", "input.working_directory", "code-injection", "generated"]