feat(model-generator): New qls for modelling composite actions

Author: Alvaro Muñoz

action.yml

@@ -8,16 +8,12 @@ inputs:
 
   source-root:
     description: "Path of the root source code directory, relative to $GITHUB_WORKSPACE."
-    default: "./"
+    default: ${{ github.workspace }}
 
-  sarif:
+  sarif-output:
     description: "SARIF File Output"
     default: "codeql-actions.sarif"
 
-# runs:
-#   using: "node16"
-#   main: ".github/action/dist/index.js"
-
 runs:
   using: 'composite'
   steps:

ql/src/Security/CWE-020/CompositeActionSummaries.ql

@@ -7,6 +7,7 @@
  * @precision high
  * @id actions/composite-action-summaries
  * @tags actions
+ *       model-generator
  *       external/cwe/cwe-020
  */
 

ql/src/Security/CWE-020/CompositeActionsSources.ql

@@ -7,6 +7,7 @@
  * @precision high
  * @id actions/composite-action-sources
  * @tags actions
+ *       model-generator
  *       external/cwe/cwe-020
  */
 

ql/src/codeql-suites/actions-summaries-queries.qls

@@ -0,0 +1,8 @@
+- description: Queries to model composite actions
+- queries: .
+
+- include:
+    kind:
+      - path-problem
+    tags contain:
+      - model-generator