From c5121c32e9f6870c2a89f688582bba0c1e975f46 Mon Sep 17 00:00:00 2001 From: Xinyu Zhang Date: Fri, 27 Mar 2026 18:09:26 -0400 Subject: [PATCH 1/2] Add a data flow to suisei-cn/actions-download-file actionsSummaryModel --- .../ql/lib/ext/manual/suisei-cn_actions-download-file.model.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/actions/ql/lib/ext/manual/suisei-cn_actions-download-file.model.yml b/actions/ql/lib/ext/manual/suisei-cn_actions-download-file.model.yml index 343c0efe42aa..4ff3d81dbe3b 100644 --- a/actions/ql/lib/ext/manual/suisei-cn_actions-download-file.model.yml +++ b/actions/ql/lib/ext/manual/suisei-cn_actions-download-file.model.yml @@ -4,3 +4,4 @@ extensions: extensible: actionsSummaryModel data: - ["suisei-cn/actions-download-file", "*", "input.filename", "output.filename", "taint", "manual"] + - ["suisei-cn/actions-download-file", "*", "input.url", "output.filename", "taint", "manual"] From 71012b8c7878f79dba272c53cdf8c82eae64653c Mon Sep 17 00:00:00 2001 From: Xinyu Zhang Date: Fri, 27 Mar 2026 18:38:03 -0400 Subject: [PATCH 2/2] Add change notes --- .../2026-03-27-suisei-cn#actions-download-file.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 actions/ql/src/change-notes/2026-03-27-suisei-cn#actions-download-file.md diff --git a/actions/ql/src/change-notes/2026-03-27-suisei-cn#actions-download-file.md b/actions/ql/src/change-notes/2026-03-27-suisei-cn#actions-download-file.md new file mode 100644 index 000000000000..356b960832b7 --- /dev/null +++ b/actions/ql/src/change-notes/2026-03-27-suisei-cn#actions-download-file.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* Added taint flow model for `suisei-cn/actions-download-file` action. \ No newline at end of file