Files
pulse/.github/codeql/extensions/pulse-security-models/models/go-storage.yml
T
2026-07-09 19:46:40 +01:00

17 lines
1.3 KiB
YAML

extensions:
- addsTo:
pack: codeql/go-all
extensible: barrierModel
data:
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "HashedStorageName", "", "", "ReturnValue", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "JoinStorageLeaf", "", "", "ReturnValue[0]", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "NormalizeStorageDir", "", "", "ReturnValue[0]", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "ValidateOutboundFetchURL", "", "", "ReturnValue[0]", "request-forgery", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/api", "", false, "normalizeConfiguredSSOFilePath", "", "", "ReturnValue[0]", "path-injection", "manual"]
- addsTo:
pack: codeql/go-all
extensible: barrierGuardModel
data:
- ["github.com/rcourtman/pulse-go-rewrite/internal/config", "", false, "isValidOrgID", "", "", "Argument[0]", "true", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/api", "", false, "isValidTenantOrgID", "", "", "Argument[0]", "true", "path-injection", "manual"]