amammad
2d0067d618
fix some qldocs, change Sink extenstion model, deduct some not necessarily checks :)
2023-12-07 13:45:28 +01:00
github-actions[bot]
92af5f5386
Post-release preparation for codeql-cli-2.15.4
2023-12-06 22:59:22 +00:00
github-actions[bot]
c04457e9e7
Release preparation for version 2.15.4
2023-12-06 21:11:50 +00:00
Rasmus Wriedt Larsen
c952f6a648
Python: Update rest of tests to new dataflow lib
...
I had missed these originally, since I had just fixed the ones that were
highlighted in the actions logs, thinking they had covered everything :(
2023-12-04 14:49:40 +01:00
Chris Campbell
27a2781954
Merge branch 'github:main' into main
2023-11-20 12:15:45 +00:00
github-actions[bot]
bad499e360
Post-release preparation for codeql-cli-2.15.3
2023-11-17 14:35:41 +00:00
Chris Campbell
114b694553
Remove @precision values, correct missing tags
2023-11-16 15:50:41 +00:00
github-actions[bot]
6ec9b95072
Release preparation for version 2.15.3
2023-11-16 13:07:16 +00:00
Henry Mercer
de83929a60
Remove LoC metrics from the analysis summary
2023-11-16 11:36:44 +00:00
Rasmus Wriedt Larsen
71ef98584d
Merge pull request #14791 from RasmusWL/python-3.12
...
Python: Update `.expected` to support Python 3.12
2023-11-16 10:42:48 +01:00
Rasmus Wriedt Larsen
df144f3a1e
Merge pull request #14406 from amammad/amammad-python-FileSystemAccess
...
Python: New FileSystem Access
2023-11-16 10:25:34 +01:00
Rasmus Wriedt Larsen
23419ee634
Python: Update .expected to support Python 3.12
...
You might wonder why the number of lines changed, but it's due to `tty`
module receiving its' first update since 2001, so the actual number of
lines DID change :phew:
https://github.com/python/cpython/commits/3.12/Lib/tty.py
Since there is now a difference between Python 2 and Python 3, we need to restrict the lines of code test to only run as Python 3.
2023-11-15 11:42:38 +01:00
Rasmus Wriedt Larsen
43d9d2ceb7
Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link
...
JavaScript/Python/Ruby: Improve alert message for `*/weak-cryptographic-algorithm`.
2023-11-08 14:29:24 +01:00
Geoffrey White
e8a466a02c
Update dead link.
2023-11-07 09:26:07 +00:00
Rasmus Wriedt Larsen
92b13c4259
Merge branch 'main' into amammad-python-FileSystemAccess
2023-11-06 11:30:09 +01:00
Rasmus Wriedt Larsen
3d8a7e0ee3
Python: Add change-note
2023-11-06 11:29:52 +01:00
github-actions[bot]
2b939fdf08
Post-release preparation for codeql-cli-2.15.2
2023-10-30 16:06:51 +00:00
github-actions[bot]
4641990021
Release preparation for version 2.15.2
2023-10-30 11:05:53 +00:00
Max Schaefer
104700f6d3
Address review comment.
2023-10-27 10:19:28 +01:00
Max Schaefer
08cc8b8e80
Autoformat.
2023-10-26 15:36:06 +01:00
Max Schaefer
3939167ba2
Include more details in the message for py/weak-cryptographic-algorithm.
...
Specifically, we add a link to the location where the cryptographic algorithm is configured, which can be far away from its use.
2023-10-26 11:28:09 +01:00
github-actions[bot]
8dcd8b9e5b
Post-release preparation for codeql-cli-2.15.1
2023-10-17 20:24:00 +00:00
github-actions[bot]
3b3c036626
Release preparation for version 2.15.1
2023-10-16 17:49:39 +00:00
Henry Mercer
1a370bfbbe
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0
...
Post-release preparation for codeql-cli-2.15.0
2023-10-11 17:39:04 +01:00
github-actions[bot]
ae6af17c74
Post-release preparation for codeql-cli-2.15.0
2023-10-11 14:19:20 +00:00
amammad
4283bb7d48
clean up unused vars,fix tests
2023-10-09 23:15:58 +02:00
amammad
9d86e7946c
move library file to experimental lib directory
2023-10-09 23:10:30 +02:00
amammad
1318afdb27
modularize
2023-10-09 23:07:52 +02:00
amammad
3175db226e
upgrade fastAPI remote sources
2023-10-09 20:51:19 +02:00
erik-krogh
4bc4e0845d
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
github-actions[bot]
9fe993bec3
Release preparation for version 2.15.0
2023-10-04 14:15:27 +00:00
Rasmus Wriedt Larsen
9c02b4f21c
Merge pull request #14289 from microsoft/jb1/16-cryptography-models-libraries-and-queries-migration
...
16 cryptography models libraries and queries migration
2023-10-04 12:27:59 +02:00
Josh Brown
ad86e576a4
autoformat
2023-10-03 13:40:17 -07:00
Josh Brown
b683a3caf8
Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration
2023-10-04 07:24:29 +11:00
Henry Mercer
da92da2204
Bump minor versions of packs we regularly release
2023-10-03 16:31:23 +01:00
Henry Mercer
f3847b3f51
Merge branch 'main' into henrymercer/rc-3.11-mergeback
2023-10-03 16:30:23 +01:00
yoff
dbecb1bd0f
Merge pull request #14070 from yoff/python/promote-nosql-query
...
Python: promote nosql query
2023-09-29 14:21:22 +02:00
Rasmus Wriedt Larsen
d7ad5a0f23
Python: List NoSQL injection sinks
2023-09-29 13:54:21 +02:00
Rasmus Wriedt Larsen
16e1a00e88
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
Rasmus Lerchedahl Petersen
74d6f37467
Python: update meta query TaintSinks
2023-09-29 12:02:16 +02:00
Rasmus Lerchedahl Petersen
d90630aa66
Python: fix query file
2023-09-28 12:34:10 +02:00
Benjamin Rodes
25203db4e7
Removing 'security' tags from all queries.
2023-09-27 12:43:51 -04:00
Josh Brown
7ad2932b3f
Update SymmetricEncryptionAlgorithms.ql
...
Changing metadata to under python namespace
2023-09-21 12:12:16 -07:00
Benjamin Rodes
5fed923af0
Changed python inventory subdirectory structure to add old and new inventory models. Added some example old models.
2023-09-21 12:12:15 -07:00
Benjamin Rodes
50db4fd63e
Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.
2023-09-21 12:12:15 -07:00
github-actions[bot]
3acf5244b0
Post-release preparation for codeql-cli-2.14.6
2023-09-20 10:25:10 +00:00
github-actions[bot]
0a3670727f
Release preparation for version 2.14.6
2023-09-19 11:40:30 +00:00
Rasmus Wriedt Larsen
fd8d186b34
Python: Add debug queries
...
For manually debugging things, it's nice to be able to share debug
queries.
I had the DebugStats.ql lying around from way back, and thought it was
kinda cute. I've extended it with a bunch of things, not too sure if
they're all important, but I think it's kinda fun to see the
distribution of things 😊
2023-09-18 20:46:52 +02:00
Rasmus Lerchedahl Petersen
4614b1ae9c
Python: add change note
2023-09-18 14:34:03 +02:00
Erik Krogh Kristensen
cd5973764b
Merge pull request #14112 from erik-krogh/pyAllowedHosts
...
Py: add sanitizer guard for `url_has_allowed_host_and_scheme`
2023-09-13 12:59:38 +02:00
