Fix accidental change in ControlChecks.qll

knewbury01 · knewbury01 · commit cdffef8684c2 · 2026-07-10T19:58:23.000-04:00
diff --git a/actions/ql/lib/codeql/actions/security/ControlChecks.qll b/actions/ql/lib/codeql/actions/security/ControlChecks.qll
@@ -292,7 +292,7 @@ class EnvironmentCheck extends ControlCheck instanceof Environment {
   // Environment checks are not effective against any mutable attacks
   // they do actually protect against untrusted code execution (sha)
   override predicate protectsCategoryAndEvent(string category, string event) {
-    event = actor_is_attacker_event() and category = toctou_category()
+    event = actor_is_attacker_event() and category = any_category()
     or
     event = actor_not_attacker_event() and category = non_toctou_category()
   }

Original file line number	Diff line number	Diff line change
`@@ -292,7 +292,7 @@ class EnvironmentCheck extends ControlCheck instanceof Environment {`
`292`	`292`	`// Environment checks are not effective against any mutable attacks`
`293`	`293`	`// they do actually protect against untrusted code execution (sha)`
`294`	`294`	`override predicate protectsCategoryAndEvent(string category, string event) {`
`295`		`- event = actor_is_attacker_event() and category = toctou_category()`
	`295`	`+ event = actor_is_attacker_event() and category = any_category()`
`296`	`296`	`or`
`297`	`297`	`event = actor_not_attacker_event() and category = non_toctou_category()`
`298`	`298`	`}`