mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
Apply suggestions from code review
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
This commit is contained in:
@@ -4,7 +4,7 @@ This open source repository contains the standard CodeQL libraries and queries t
|
|||||||
|
|
||||||
## How do I learn CodeQL and run queries?
|
## How do I learn CodeQL and run queries?
|
||||||
|
|
||||||
There is [extensive documentation](https://codeql.github.com/docs/) on getting started with writing CodeQL using the [CodeQL extension for Visual Studio Code](https://docs.github.com/en/code-security/codeql-for-vs-code/) and the [CodeQL CLI](https://codeql.github.com/docs/codeql-cli/).
|
There is [extensive documentation](https://codeql.github.com/docs/) on getting started with writing CodeQL using the [CodeQL extension for Visual Studio Code](https://docs.github.com/en/code-security/codeql-for-vs-code/) and the [CodeQL CLI](https://docs.github.com/en/code-security/codeql-cli).
|
||||||
|
|
||||||
## Contributing
|
## Contributing
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for C/C++
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__ from GitHub.
|
||||||
|
|
||||||
Checking for overflow in C
|
Checking for overflow in C
|
||||||
==========================
|
==========================
|
||||||
|
|||||||
@@ -11,7 +11,7 @@ CodeQL for C/C++
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code/>`__ and download the CodeQL database for `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__ from GitHub.
|
||||||
|
|
||||||
|
|
||||||
.. rst-class:: agenda
|
.. rst-class:: agenda
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ Finding string formatting vulnerabilities in C/C++
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `dotnet/coreclr <https://github.com/dotnet/coreclr>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <hhttps://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `dotnet/coreclr <https://github.com/dotnet/coreclr>`__ from GitHub.
|
||||||
|
|
||||||
.. rst-class:: agenda
|
.. rst-class:: agenda
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for C/C++
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `dotnet/coreclr <https://github.com/dotnet/coreclr>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `dotnet/coreclr <https://github.com/dotnet/coreclr>`__ from GitHub.
|
||||||
|
|
||||||
.. rst-class:: agenda
|
.. rst-class:: agenda
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for C/C++
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `exiv2 <https://github.com/Exiv2/exiv2>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `exiv2 <https://github.com/Exiv2/exiv2>`__ from GitHub.
|
||||||
|
|
||||||
.. Include language-agnostic section here
|
.. Include language-agnostic section here
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for C/C++
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `rsyslog <https://github.com/rsyslog/rsyslog>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `rsyslog <https://github.com/rsyslog/rsyslog>`__ from GitHub.
|
||||||
|
|
||||||
``snprintf``
|
``snprintf``
|
||||||
============
|
============
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ Exercise: Apache Struts
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
|
||||||
|
|
||||||
Unsafe deserialization in Struts
|
Unsafe deserialization in Struts
|
||||||
================================
|
================================
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ Finding SPARQL injection vulnerabilities in Java
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `VIVO Vitro <https://github.com/vivo-project/Vitro>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `VIVO Vitro <https://github.com/vivo-project/Vitro>`__ from GitHub.
|
||||||
|
|
||||||
.. rst-class:: agenda
|
.. rst-class:: agenda
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for Java
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
|
||||||
|
|
||||||
.. rst-class:: agenda
|
.. rst-class:: agenda
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for Java
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
|
||||||
|
|
||||||
.. Include language-agnostic section here
|
.. Include language-agnostic section here
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ CodeQL for Java
|
|||||||
Setup
|
Setup
|
||||||
=====
|
=====
|
||||||
|
|
||||||
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__ and download the CodeQL database for `VIVO Vitro <https://github.com/vivo-project/Vitro>`__ from GitHub.
|
For this example you need to set up `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__ and download the CodeQL database for `VIVO Vitro <https://github.com/vivo-project/Vitro>`__ from GitHub.
|
||||||
|
|
||||||
SQL injection
|
SQL injection
|
||||||
=============
|
=============
|
||||||
|
|||||||
@@ -36,7 +36,7 @@ Setup
|
|||||||
|
|
||||||
For this example you should download:
|
For this example you should download:
|
||||||
|
|
||||||
- `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/>`__
|
- `CodeQL for Visual Studio Code <https://docs.github.com/en/code-security/codeql-for-vs-code/getting-started-with-codeql-for-vs-code/installing-codeql-for-vs-code>`__
|
||||||
- A CodeQL database
|
- A CodeQL database
|
||||||
|
|
||||||
.. note::
|
.. note::
|
||||||
|
|||||||
@@ -2,5 +2,5 @@
|
|||||||
|
|
||||||
Note
|
Note
|
||||||
|
|
||||||
This documentation was migrated to docs.github.com/en/code-security/codeql-for-vs-code on 2024/05/08, and this version is no longer maintained.
|
This documentation `was migrated <https://github.blog/changelog/2024-04-18-codeql-for-visual-studio-code-documentation-is-now-on-docs-github-com/>`_ to docs.github.com/en/code-security/codeql-for-vs-code on 2024/05/08, and this version is no longer maintained.
|
||||||
|
|
||||||
@@ -277,7 +277,7 @@ No user-facing changes.
|
|||||||
|
|
||||||
### Bug Fixes
|
### Bug Fixes
|
||||||
|
|
||||||
* The [View AST functionality](https://docs.github.com/en/code-security/codeql-for-vs-code/) no longer prints detailed information about regular expressions, greatly improving performance.
|
* The [View AST functionality](https://docs.github.com/en/code-security/codeql-for-vs-code/using-the-advanced-functionality-of-the-codeql-for-vs-code-extension/exploring-the-structure-of-your-source-code) no longer prints detailed information about regular expressions, greatly improving performance.
|
||||||
|
|
||||||
## 0.0.8
|
## 0.0.8
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user