Joe Farebrother
5f08371f19
Add change note
2024-06-12 15:11:39 +01:00
Joe Farebrother
07f03be8cc
Add unit tests
2024-06-12 15:11:35 +01:00
Joe Farebrother
b0c03f6d68
Allow implicit read steps on sinks
2024-06-12 15:11:32 +01:00
Joe Farebrother
8b51ee8fe8
Use additional sensitive data heuristics in CleartextSources
2024-06-12 15:11:27 +01:00
Arthur Baars
4ee80653e2
Merge pull request #16471 from Sim4n6/ruby-UBV
...
Ruby: Add some method calls as a Source
2024-06-12 12:42:08 +02:00
Mathias Vorreiter Pedersen
3351b9547d
Merge branch 'rc/3.14' into rc-3.14-mergeback
2024-06-11 16:21:08 +01:00
github-actions[bot]
8a25081a0e
Post-release preparation for codeql-cli-2.17.5
2024-06-10 15:33:08 +00:00
Cornelius Riemenschneider
092bc6445d
Rust/bazel: Port to bzlmod.
...
This gets rid of our last workspace dependency.
In particular, this change also gets rid of the checked-in extra
lock files that took forever to generate.
2024-06-10 17:03:58 +02:00
github-actions[bot]
877bfa2468
Release preparation for version 2.17.5
2024-06-10 13:40:39 +00:00
Sim4n6
7c0ce6486b
Rerun the test learn
2024-06-10 12:21:10 +01:00
Anders Schack-Mulligen
5d51b5b97b
Ruby: Add support for pretty-printed provenace in tests. Convert one test.
2024-06-07 11:47:48 +02:00
Tom Hvitved
eae6406629
Merge pull request #16687 from hvitved/ruby/bump-ts-grammar
...
Ruby: Bump tree-sitter grammar
2024-06-06 17:44:18 +02:00
Asger F
6e0f3df573
Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused
...
Dynamic: add TypeModel.isTypeUsed
2024-06-06 15:31:16 +02:00
Tom Hvitved
523139259a
Ruby: Update cargo-bazel-lock.json
2024-06-06 10:46:01 +02:00
Tom Hvitved
7122db0c45
Ruby: Bump tree-sitter grammar
2024-06-06 10:31:16 +02:00
Tom Hvitved
421c68a263
Merge pull request #16663 from hvitved/ruby/extraction-error-consistency
...
Ruby: Add consistency query for extraction errors
2024-06-06 10:29:56 +02:00
Sim4n6
dabc33bf66
simplify UnicodeBypassValidationQuery code
2024-06-05 22:45:49 +01:00
Sim4n6
7dcbbbac91
Refactor UnicodeBypassValidationQuery to remove unnecessary code
2024-06-05 13:05:34 +01:00
Tom Hvitved
e42de3de6f
Ruby: Fix extraction errors
2024-06-04 14:54:02 +02:00
Tom Hvitved
ad99158838
Ruby: Fix/accept extraction errors
2024-06-04 12:55:44 +02:00
Tom Hvitved
858c7cead2
Ruby: Add consistency query for extraction errors
2024-06-04 12:55:42 +02:00
Cornelius Riemenschneider
63116d2779
Merge pull request #16656 from github/criemen/pkg-javascript
...
Javascript: use `codeql_pack` for javascript extractor
2024-06-04 11:58:45 +02:00
Tom Hvitved
e6dc36b2c4
Merge pull request #16636 from hvitved/tree-sitter/verbosity-fix
...
Tree-sitter: Verbosity fixes
2024-06-04 08:33:28 +02:00
Paolo Tranquilli
7b8c11379d
Javascript: use codeql_pack for javascript extractor
2024-06-03 23:14:44 +02:00
Cornelius Riemenschneider
1bd7aef1b2
Fix search paths.
...
It turns out we still need to supply this option, so `codeql` goes looking
for the extractor paths specified in the `codeql-workspace.yml` file.
2024-06-03 16:33:17 +02:00
Cornelius Riemenschneider
5c77b8708c
Ruby: Unified handling of in-tree extractor packs.
2024-06-03 16:06:24 +02:00
Cornelius Riemenschneider
b9da01a384
Merge remote-tracking branch 'origin/main' into criemen/new-pkg
2024-06-03 15:47:15 +02:00
Tom Hvitved
beeae69845
Tree-sitter: Verbosity fixes
2024-05-31 20:10:19 +02:00
Alex Ford
1100b75a3c
Ruby: handle routes with path/action pairs
2024-05-31 15:54:57 +01:00
Alex Ford
0473655752
Ruby: actiondispatch add hash arg testcase
2024-05-31 15:08:35 +01:00
Alex Ford
22858249f9
Ruby: actiondispatch test whitespace changes
2024-05-31 15:07:39 +01:00
Paolo Tranquilli
096a31dbef
Mark all integration tests as legacy
...
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
2024-05-31 16:04:50 +02:00
Alex Ford
4644f08195
Ruby: Routing.qll - rename call as methodCall
2024-05-31 14:45:32 +01:00
Alex Ford
25f9449f53
Ruby: Routing.qll - rename method as httpMethod
2024-05-31 14:45:26 +01:00
Alex Ford
af9ed21c36
Ruby: Routing.qll - rename method as methodCall
2024-05-31 14:45:20 +01:00
Cornelius Riemenschneider
60cb8e7e8e
Ruby: Move to new packaging rules.
2024-05-30 14:25:20 +02:00
github-actions[bot]
906b65d09c
Post-release preparation for codeql-cli-2.17.4
2024-05-28 18:02:25 +00:00
github-actions[bot]
33b4ae8bbb
Release preparation for version 2.17.4
2024-05-28 15:44:32 +00:00
Tom Hvitved
69fb2bb97c
Merge pull request #16597 from hvitved/tree-sitter/empty-location
...
Tree-sitter: Emit `empty_location` relation to avoid scan
2024-05-27 15:19:15 +02:00
Anders Schack-Mulligen
1432519cc2
Dataflow: Add totalorder predicates to all languages.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
bc8ca1af86
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
2024-05-27 11:01:51 +02:00
Tom Hvitved
686879a2a3
Ruby: Add up/downgrade scripts
2024-05-27 10:39:22 +02:00
Tom Hvitved
94d2e9591d
Tree-sitter: Emit empty_location relation to avoid scan
2024-05-27 10:39:21 +02:00
Cornelius Riemenschneider
b09f3c1c0d
Don't build with cross any longer.
...
We've removed cross from the internal build when converting to bazel,
mirror that here.
2024-05-24 16:17:37 +02:00
Cornelius Riemenschneider
8c46b61e85
Ruby: Change how we pull in shared/tree-sitter-extractor dependency
...
Previously, we pulled in the shared tree-sitter extractor via a `git`
dependency in `Cargo.toml` to address a `rules_rust` limitation (no `path`
dependencies outside of the cargo workspace)). This was a problem,
as that means we're cloning `github/codeql` _again_ for the build, which is
quite slow.
I found another way that is faster, and still produces correct builds
for both `cargo`` and `rules_rust`:
* Cargo depends on a fake crate that has the same dependencies as the real crate (thanks to `sync-files.py`). Therefore, cargo pulls in the right dependencies into the lockfile, which bazel targets
* For local builds, we override the path to that dependency in a cargo config, so we're pulling in the correct code
* rules_rust only uses `path` dependencies for collecting transitive dependencies, it never pulls in the code from there. So far that, we manually provide a `BUILD.bazel` file for the shared extractor, and depend on that.
2024-05-24 15:37:35 +02:00
Tom Hvitved
386bc1eb03
Bazel: repin
2024-05-24 13:53:55 +02:00
Tom Hvitved
7490472772
Update Python to use Rust 1.74
2024-05-24 13:05:39 +02:00
Tom Hvitved
0dbce3d077
Merge pull request #16451 from hvitved/treesitter/codeql-verbosity
...
Tree-sitter: Respect verbosity defined in `CODEQL_VERBOSITY`
2024-05-24 11:24:01 +02:00
Dave Bartolomeo
613ccaac1d
Add change note to all v1.0.0 packs
2024-05-23 13:01:22 -04:00
Tom Hvitved
e4cd9d86f6
Tree-sitter: Respect verbosity defined in CODEQL_VERBOSITY
2024-05-23 13:38:35 +02:00
