File tree Expand file tree Collapse file tree 2 files changed +3
-1
lines changed
integration-tests/query-suite
lib/codeql/actions/security Expand file tree Collapse file tree 2 files changed +3
-1
lines changed Original file line number Diff line number Diff line change @@ -10,6 +10,8 @@ ql/actions/ql/src/experimental/Security/CWE-078/CommandInjectionCritical.ql
1010ql/actions/ql/src/experimental/Security/CWE-078/CommandInjectionMedium.ql
1111ql/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.ql
1212ql/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.ql
13+ ql/actions/ql/src/experimental/Security/CWE-1427/PromptInjectionCritical.ql
14+ ql/actions/ql/src/experimental/Security/CWE-1427/PromptInjectionMedium.ql
1315ql/actions/ql/src/experimental/Security/CWE-200/SecretExfiltration.ql
1416ql/actions/ql/src/experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
1517ql/actions/ql/src/experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
Original file line number Diff line number Diff line change @@ -85,7 +85,7 @@ predicate criticalSeverityPromptInjection(
8585 * and any other externally triggerable context that Critical excludes.
8686 *
8787 * Only actor/association control checks suppress Medium findings because
88- * repository checks do not prevent prompt injection — any user who can
88+ * repository checks do not prevent prompt injection -- any user who can
8989 * open an issue/PR on the target repo can inject into the prompt content.
9090 */
9191Event getRelevantEventForMediumSeverity ( DataFlow:: Node sink ) {
You can’t perform that action at this time.
0 commit comments