Owen Mansel-Chan
3eb419eb1a
Give context for code examples
2022-12-20 22:20:13 +00:00
Jami
c9258effb6
Merge pull request #11572 from jcogs33/jcogs33/model-top-jdk-apis
...
Java: model top 100 JDK APIs
2022-12-20 09:13:53 -05:00
Aditya Sharad
ed29b3e4d6
Shared packs: Depend on codeql/tutorial from all language libraries
...
This allows `import tutorial` from queries targeting
any language, just like before, while removing the
duplicate copies of `tutorial.qll`.
2022-12-19 15:52:11 -08:00
Sid Shankar
ae3e25786f
Remove LGTM references from README.md + cleanup
2022-12-19 20:51:01 +00:00
Sid Shankar
35000e5d7e
Remove LGTM reference from CONTRIBUTING.md
2022-12-19 20:12:23 +00:00
Arthur Baars
a8be5d7274
AlertSuppression: add change notes
2022-12-19 17:02:52 +01:00
Arthur Baars
0f313231bc
AlertSuppression: add more tests
2022-12-19 16:43:11 +01:00
Arthur Baars
c176606be5
AlertSuppression: allow //lgtm comments to scope over the next line
2022-12-19 16:10:26 +01:00
Arthur Baars
016c7a8ca7
Merge pull request #11719 from aibaars/alert-suppression-shared
...
Shared AlertSuppression library
2022-12-19 16:04:44 +01:00
Arthur Baars
06736e3e91
Add .gitattributes for Windows test files
2022-12-19 12:39:01 +01:00
Arthur Baars
b0e8085765
Go: use shared AlertSuppression.qll
2022-12-19 12:25:21 +01:00
turbo
1e5426fca2
Create security-experimental suite helper and all language suite implementations
2022-12-18 15:44:08 +01:00
Jami
ff652f7dee
Merge branch 'main' into jcogs33/model-top-jdk-apis
2022-12-16 15:32:50 -05:00
Henry Mercer
30451ee950
Merge pull request #11681 from github/henrymercer/mergeback-3.8
...
Merge `rc/3.8` back to `main`
2022-12-16 17:43:12 +00:00
Owen Mansel-Chan
003edeab80
Merge pull request #11706 from owen-mc/fix/go-callback-type-stubs-2
...
Go: Use any() to stub getCallbackParameter/ReturnType and getSyntheticGlobalType
2022-12-16 14:43:35 +00:00
Tom Hvitved
e45edcc159
Merge pull request #11674 from hvitved/dataflow/param-context
...
Data flow: Track callable in flow-through pruning
2022-12-16 09:25:15 +01:00
Jami Cogswell
f01ee9e4c2
Java: remove PR-merging comment
2022-12-15 22:56:15 -05:00
Jami
fd63348549
Merge pull request #11585 from jcogs33/jcogs33/mad-metrics-query
...
Java: add MaD metrics query
2022-12-15 19:26:51 -05:00
Tom Hvitved
f8571dd0b6
Data flow: Work around functionality-induced misoptimization
2022-12-15 15:29:14 +01:00
Tom Hvitved
6eda042229
Data flow: Sync files
2022-12-15 15:29:13 +01:00
Owen Mansel-Chan
76a3fa856f
Use any() to stub getSyntheticGlobalType
...
This is used in all other languages not currently using dataflow type
pruning.
2022-12-15 12:24:23 +00:00
Owen Mansel-Chan
1a1b6a1b93
Use any() to stub getCallbackParameter/ReturnType
...
This is used in all other languages not currently using dataflow type
pruning.
2022-12-15 12:24:23 +00:00
Owen Mansel-Chan
0af530061d
Merge pull request #11697 from owen-mc/go/make-dataflowtype-singleton
...
Make DataFlowType a singleton
2022-12-15 12:07:57 +00:00
Owen Mansel-Chan
039d582060
Fix date in unrelated change note
2022-12-15 11:04:48 +00:00
Owen Mansel-Chan
06038d575e
Improve comments about Fields
2022-12-15 11:04:48 +00:00
Owen Mansel-Chan
e01e40c532
Fix FuncTypeExpr.getNumParameter
...
It actually counts the number of parameter declarations. We correct it
to do what it says and introduce `FuncTypeExpr.getNumParameterDecls`,
which we then use in `FuncTypeExpr.getUniquelyNumberedChild`.
2022-12-15 11:04:48 +00:00
Jami Cogswell
46b8fbc4c9
Java: update remaining models, resolve merge conflict
2022-12-15 00:33:06 -05:00
Jami
359e49044f
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-14 15:33:29 -05:00
turbo
4ec401a3f6
Tag all security queries in supported languages' experimental directories with an experimental tag
2022-12-14 17:15:50 +01:00
Owen Mansel-Chan
6ef677b606
Fix test to use hasQualifiedName/2
2022-12-14 15:20:02 +00:00
Owen Mansel-Chan
d18179c243
Add QLDoc for toString on DataFlowType
2022-12-14 14:56:54 +00:00
Owen Mansel-Chan
50414cc748
Make DataFlowType a singleton
2022-12-14 14:40:15 +00:00
Chris Smowton
5799287a2b
go: fix bug in zip-slip example fix
2022-12-14 13:51:32 +00:00
Owen Mansel-Chan
0b849a319b
Merge pull request #11587 from owen-mc/go/remove-error-expr-from-dbscheme
...
Go: Remove @errorexpr from the dbscheme (use @badexpr)
2022-12-14 13:15:04 +00:00
Owen Mansel-Chan
3c6f466e78
Include downgrade scripts in extractor pack
2022-12-14 10:46:20 +00:00
Owen Mansel-Chan
14e6f9fee2
Remove @errorexpr from the dbscheme (use @badexpr)
2022-12-14 10:46:19 +00:00
Henry Mercer
a3933fbf4f
Bump minor versions of packs we regularly release
2022-12-13 18:59:24 +00:00
Henry Mercer
7167f078be
Merge branch 'main' into henrymercer/mergeback-3.8
2022-12-13 18:40:53 +00:00
Jami Cogswell
a33436a39b
Java: update hasProvenance
2022-12-13 11:26:23 -05:00
Tom Hvitved
4d2436dd82
Go: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
0c2eee2a72
Data flow: Sync files
2022-12-13 09:52:55 +01:00
Jami
93d8a03e73
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-12 20:31:53 -05:00
Jami Cogswell
623068c4b9
Java: add hasProvenance predicate, remove isManuallyGenerated and isBothAutoAndManuallyGenerated
2022-12-12 11:23:46 -05:00
erik-krogh
873d3553cd
Merge branch 'main' into static-useInstanceOf
2022-12-12 15:36:54 +01:00
github-actions[bot]
343b7b1c8b
Post-release preparation for codeql-cli-2.11.6
2022-12-11 18:15:04 +00:00
erik-krogh
8262fbbfb5
Java/C#/GO: Use instanceof in more places
2022-12-11 18:32:19 +01:00
github-actions[bot]
0b2fb4f70a
Release preparation for version 2.11.6
2022-12-10 15:49:35 +00:00
Jami Cogswell
6854845b75
Java: refactor isManuallyGenerated and isBothAutoAndManuallyGenerated
2022-12-09 18:37:50 -05:00
Michael Nebel
ac2d55880c
Go: Rename Negative Summary Model to Neutral Model.
2022-12-09 15:04:43 +01:00
Michael Nebel
079d48c42a
Sync files.
2022-12-09 15:04:42 +01:00