Michael B. Gale
21fbb1b051
Go: Only initialise module if there are source files
2024-02-14 19:12:28 +00:00
Michael B. Gale
f48b1e57d7
Go: Check for relative paths warning even if go mod tidy is successful
2024-02-14 19:12:28 +00:00
Michael B. Gale
aa5e14f59f
Go: Replace BuildInfo with GoWorkspace
2024-02-14 19:12:28 +00:00
Michael B. Gale
8b376e7a35
Go: Include ModMode in GoWorkspace
2024-02-14 19:12:28 +00:00
Michael B. Gale
025fbc874f
Go: Move definition of GoVersionInfo
2024-02-14 19:12:28 +00:00
Michael B. Gale
bdae54714a
Go: Change getDepMode to return GoWorkspaces
2024-02-14 19:12:27 +00:00
Michael B. Gale
64122ba867
Go: Include DependencyInstallerMode in GoWorkspace
2024-02-14 19:12:27 +00:00
Michael B. Gale
7392440475
Go: Move DependencyInstallerMode up
2024-02-14 19:12:27 +00:00
Michael B. Gale
b5ae8ace0d
Go: Add a function for go mod init
2024-02-14 19:12:27 +00:00
Michael B. Gale
1bf747ef3a
Go: Create go.mod file if necessary in project discovery
2024-02-14 19:12:27 +00:00
Michael B. Gale
254634075f
Go: Add shared TidyModule function
2024-02-14 19:12:26 +00:00
Michael B. Gale
f013d9d373
Go: Use new workspace/module discovery
2024-02-14 19:12:26 +00:00
Michael B. Gale
fc75e44238
Go: Allow GetBuildInfo to return multiple BuildInfo objects
2024-02-14 19:12:26 +00:00
Michael B. Gale
4f5c43a3c6
Go: Add new functions for discovering workspaces and modules
2024-02-14 19:12:26 +00:00
Michael B. Gale
3f53186ad1
Go: Add helper functions for discovering go.work and go.mod files
2024-02-14 19:12:25 +00:00
Michael B. Gale
60879bd367
Go: Introduce new types for representing logical workspaces
2024-02-14 19:12:25 +00:00
Michael B. Gale
82bd1d7b0b
Go: Add SupportsWorkspaces function
2024-02-14 19:12:25 +00:00
Michael B. Gale
237bf5653a
Go: Move getEnvGoSemVer to toolchain.go
2024-02-14 19:12:25 +00:00
Michael B. Gale
bd36847ca2
Go: Emit relative path import diagnostic if prompted by go mod tidy
...
The corresponding integration test now successfully extracts the project
2024-02-14 19:12:25 +00:00
Michael B. Gale
c2571160c3
Go: Rename findGoModFiles to getBuildRoot
2024-02-14 19:12:24 +00:00
Michael B. Gale
0488d1d295
Go: Move getDirs into util and document/rename
2024-02-14 19:12:24 +00:00
Michael B. Gale
df212807a0
Go: Try to initialise go.mod file for legacy projects
2024-02-14 19:12:24 +00:00
Tony Torralba
582f341d9e
Add references to qhelp
2024-02-14 17:25:09 +01:00
Tony Torralba
f9638760ff
Fix MaD rows
2024-02-14 17:25:08 +01:00
Tony Torralba
769ec16803
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-02-14 17:25:08 +01:00
Tony Torralba
5a82d2188a
Fix double quotes in MaD row
2024-02-14 17:25:08 +01:00
Tony Torralba
85b22a2b98
Fix QHelp
2024-02-14 17:25:08 +01:00
Tony Torralba
ad7d40f0af
Add missing QLDoc
2024-02-14 17:25:08 +01:00
Tony Torralba
2a30898af6
Go: Promote go/missing-jwt-signature-check from experimental
2024-02-14 17:25:03 +01:00
Tony Torralba
1202b5b429
Go: Use less confusing name for hardcoded credentials tests
...
We don't want name-based heuristics to pick these variable names, but also using something like 'safeName' may mislead readers into believing the test cases are intended to be GOOD cases (i.e. safe)
2024-02-14 17:06:05 +01:00
Chris Smowton
7ed73bc4ed
change note
2024-02-14 15:45:03 +00:00
Chris Smowton
9016997b51
Golang: fix flow from a map value via a range statement
2024-02-14 14:56:24 +00:00
Tony Torralba
5ce35e47b9
Adjust a test case so that the key isn't considered dummy
...
(len < 4)
2024-02-14 13:06:31 +01:00
Tony Torralba
458bbb3581
Rename fwk module
2024-02-14 12:23:27 +01:00
Tony Torralba
16284fdd20
Discard sources that are obvious dummy values
2024-02-14 12:21:52 +01:00
Tony Torralba
a76de495e0
Simplify sanitizers
...
Use DataFlow::returnedWithError instead
2024-02-14 12:21:51 +01:00
Tony Torralba
6b74cb7e75
Remove unneeded $ANYVERSION
2024-02-14 12:21:51 +01:00
Tony Torralba
3fb422ca25
Split Jwt.qll into framework libraries, which makes more sense
2024-02-14 12:21:38 +01:00
Tony Torralba
8afaa231ee
Update go/ql/lib/semmle/go/security/Jwt.qll
2024-02-14 12:15:20 +01:00
Tony Torralba
304998d50e
Update go/ql/src/Security/CWE-798/HardcodedCredentials.ql
2024-02-14 12:15:20 +01:00
Tony Torralba
84d1d72497
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-02-14 12:15:19 +01:00
Tony Torralba
750c8085cb
Remove duplicated main from tests
2024-02-14 12:15:19 +01:00
Tony Torralba
ba1faea630
Go: Promote go/hardcoded-key from experimental
2024-02-14 12:15:14 +01:00
Michael B. Gale
f7955db841
Merge pull request #15603 from github/mbg/go/fix-file-info-extraction
2024-02-13 20:02:13 +00:00
Michael B. Gale
205847df64
Go: Add DummyFile class
2024-02-13 17:49:31 +00:00
Michael B. Gale
c6f4495ada
Go: Exclude dummy files from File
2024-02-13 17:46:41 +00:00
Michael B. Gale
be521508c2
Go: Do not add dummy files to CompilationCompilingFilesTable
2024-02-13 14:21:07 +00:00
Michael B. Gale
5e08bf0dbf
Go: Add missing call to extractFileInfo
2024-02-13 14:20:45 +00:00
dependabot[bot]
a3008083ea
Bump the extractor-dependencies group in /go/extractor with 1 update
...
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/tools](https://github.com/golang/tools ).
Updates `golang.org/x/tools` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.17.0...v0.18.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-13 03:58:21 +00:00
Anders Schack-Mulligen
3b8af1e52a
Go: Add empty provenance column to expected files.
2024-02-09 11:32:07 +01:00
