Michael B. Gale
46d49cd66f
Downgrade log injection precision to medium
...
This is in line with the precision of this query for other languages
2023-02-08 15:49:06 +00:00
Chris Smowton
99bed0b089
Merge pull request #12127 from smowton/smowton/perf/golang-less-string-construction
...
Go: Consolidate repeated calls to `matches` and `regexpMatch`
2023-02-08 11:07:39 +00:00
Michael B. Gale
3abf321071
Merge pull request #11496 from github/mbg/add/writable-file-closed-error-query
...
Go: Add query to detect lack of error handling for `os.File.Close` on writable handles
2023-02-08 10:53:44 +00:00
Chris Smowton
99d3f689dc
Consolidate repeated calls to matches and regexpMatch
...
This is especially useful if it avoids temporary string construction, such as toLowerCase().matches(...)
2023-02-07 19:22:49 +00:00
Michael B. Gale
f7a2a8677a
Rename change note file
2023-02-06 09:13:11 +00:00
Michael B. Gale
6c0d2bdee1
Add example without defer statement
2023-02-06 09:10:41 +00:00
Michael B. Gale
abe38373da
Inline precededBySync
2023-02-06 08:47:47 +00:00
Michael B. Gale
314ecab90a
Use dominatesNode and improve variable naming
2023-02-06 08:47:46 +00:00
Michael B. Gale
85a339030b
Make the query a path-problem
2023-02-06 08:47:46 +00:00
Michael B. Gale
199c8641ec
Rename close to sink in query
2023-02-06 08:47:46 +00:00
Michael B. Gale
f648b021a9
Despecialise parameter names for precededBySync
2023-02-06 08:47:46 +00:00
Michael B. Gale
bd6c167be6
Fixup: more docs improvements
2023-02-06 08:47:46 +00:00
Michael B. Gale
f866e16679
Use any instead of exists for isCloseSink
2023-02-06 08:47:45 +00:00
Michael B. Gale
5ab6056b26
Fixup: docs comment
2023-02-06 08:47:45 +00:00
Michael B. Gale
3f446bc76e
Use three-argument hasQualifiedName
2023-02-06 08:47:45 +00:00
Michael B. Gale
07041bb659
Use Method instead of Function where able
2023-02-06 08:47:45 +00:00
Michael B. Gale
416ed57583
Fix qldoc comments
2023-02-06 08:47:45 +00:00
Michael B. Gale
f321adf9f4
Fix typo
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2023-02-06 08:47:44 +00:00
Michael B. Gale
10109b4925
Fix class comments
2023-02-06 08:47:44 +00:00
Michael B. Gale
49ce91fd5b
Update precision to high
2023-02-06 08:47:44 +00:00
Michael B. Gale
7e9617f3ce
Detect lack of error handling for os.File.Close
2023-02-06 08:47:43 +00:00
Owen Mansel-Chan
9ed7836367
Fix files that gofmt can't parse
...
We have some .go files that gofmt can't parse because they don't start
with "package". This was intentional, as they are fragments to be
included in .qhelp files. They don't affect the return code as gofmt
doesn't change their formatting, so this wasn't changing the result of
the check. However, it was confusing that when the check failed because
some other files weren't formatted correctly, the user would see the
stderr complaining about those files, so we capture stderr.
It would be an improvement to print which files are not formatted
correctly, but that was beyond my abilities with bash and makefiles.
2023-02-06 07:16:58 +00:00
github-actions[bot]
faf21f3edb
Post-release preparation for codeql-cli-2.12.2
2023-02-02 23:01:04 +00:00
github-actions[bot]
a4fa984792
Release preparation for version 2.12.2
2023-02-02 14:34:55 +00:00
github-actions[bot]
b62cb6ba84
Post-release preparation for codeql-cli-2.12.1
2023-01-20 19:49:56 +00:00
github-actions[bot]
005b3e4a47
Release preparation for version 2.12.1
2023-01-20 12:03:19 +00:00
Owen Mansel-Chan
3fda9f6e65
Add change note
2023-01-18 15:42:42 +00:00
Pierre
c3116b3f0f
Merge branch 'main' into turbo/experimental/combined
2023-01-11 18:02:55 +01:00
Tony Torralba
7a92970d89
Go: Remove omittable exists variables
2023-01-10 13:36:48 +01:00
github-actions[bot]
cdb8f67601
Post-release preparation for codeql-cli-2.12.0
2023-01-06 10:36:34 +00:00
Nick Rolfe
6e07076151
tweak wording in 2.12 release notes
2023-01-05 16:46:44 +00:00
github-actions[bot]
b6a8193785
Release preparation for version 2.12.0
2023-01-05 16:32:14 +00:00
Arthur Baars
035ad65e43
AlertSuppression: move library into util folder
2022-12-21 10:39:57 +01:00
Arthur Baars
a8be5d7274
AlertSuppression: add change notes
2022-12-19 17:02:52 +01:00
Arthur Baars
c176606be5
AlertSuppression: allow //lgtm comments to scope over the next line
2022-12-19 16:10:26 +01:00
Arthur Baars
016c7a8ca7
Merge pull request #11719 from aibaars/alert-suppression-shared
...
Shared AlertSuppression library
2022-12-19 16:04:44 +01:00
Arthur Baars
b0e8085765
Go: use shared AlertSuppression.qll
2022-12-19 12:25:21 +01:00
turbo
1e5426fca2
Create security-experimental suite helper and all language suite implementations
2022-12-18 15:44:08 +01:00
Henry Mercer
30451ee950
Merge pull request #11681 from github/henrymercer/mergeback-3.8
...
Merge `rc/3.8` back to `main`
2022-12-16 17:43:12 +00:00
turbo
4ec401a3f6
Tag all security queries in supported languages' experimental directories with an experimental tag
2022-12-14 17:15:50 +01:00
Chris Smowton
5799287a2b
go: fix bug in zip-slip example fix
2022-12-14 13:51:32 +00:00
Henry Mercer
a3933fbf4f
Bump minor versions of packs we regularly release
2022-12-13 18:59:24 +00:00
Henry Mercer
7167f078be
Merge branch 'main' into henrymercer/mergeback-3.8
2022-12-13 18:40:53 +00:00
github-actions[bot]
343b7b1c8b
Post-release preparation for codeql-cli-2.11.6
2022-12-11 18:15:04 +00:00
erik-krogh
8262fbbfb5
Java/C#/GO: Use instanceof in more places
2022-12-11 18:32:19 +01:00
github-actions[bot]
0b2fb4f70a
Release preparation for version 2.11.6
2022-12-10 15:49:35 +00:00
Chris Smowton
49bc524fd0
Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main
2022-12-08 11:12:30 +00:00
github-actions[bot]
5e35785fd0
Post-release preparation for codeql-cli-2.11.5
2022-12-02 11:37:44 +00:00
github-actions[bot]
31ab22e3a0
Release preparation for version 2.11.5
2022-12-01 20:05:14 +00:00
Arthur Baars
cf7ebe2fa8
Merge pull request #11471 from github/rc/3.8
...
Merge rc/3.8 into main
2022-11-29 12:57:34 +01:00
