Jami Cogswell
869f820fcf
Shared: add 'SharedModelValidation' file as experiment
2023-06-05 12:18:33 -04:00
Michael B. Gale
06d48dca67
Merge pull request #13211 from github/mbg/identify-environment-stubs
...
Shared: Add stubs for `identify-environment` scripts
2023-06-05 10:29:06 +01:00
Maiky
1a9bfb38aa
Correct barrier
2023-06-05 01:25:17 +02:00
Maiky
bf9d0b93d7
Add Improper LDAP Auth Query (CWE-287)
2023-06-03 23:20:11 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
Michael Nebel
06b02eb3ce
Sync files.
2023-06-01 09:30:31 +02:00
Arthur Baars
c211b704f3
Merge pull request #13272 from github/post-release-prep/codeql-cli-2.13.3
...
Post-release preparation for codeql-cli-2.13.3
2023-05-31 15:33:12 +02:00
Michael Nebel
915042a881
Minor cleanup and sync files.
2023-05-26 12:25:00 +02:00
Michael Nebel
b794627335
Go: Re-factor getComponent.
2023-05-26 12:24:59 +02:00
Michael B. Gale
631ba6584d
Go: Update identify-environment JSON format
...
The spec changed after this was implemented and merged
2023-05-26 10:13:40 +01:00
Michael B. Gale
af803c8886
Go: include new scripts in Makefile
2023-05-26 10:13:40 +01:00
github-actions[bot]
d2e192020b
Post-release preparation for codeql-cli-2.13.3
2023-05-24 11:26:12 +00:00
Chris Smowton
99c211955b
Hotfix: Go: exclude method receivers from dead-store-of-field query
2023-05-23 14:31:25 +01:00
Chris Smowton
8b28848c82
Merge pull request #13250 from smowton/smowton/hotfix/golang-field-store-varargs-function
...
Hotfix: Go: count passing to a vararg function as escaping
2023-05-23 12:03:48 +01:00
Chris Smowton
d5d56cde5a
Dead store of field: count passing to a vararg function as escaping
2023-05-23 10:51:21 +01:00
github-actions[bot]
7aa23cf11d
Release preparation for version 2.13.3
2023-05-22 20:47:00 +00:00
Owen Mansel-Chan
1a9bd9ccde
Merge pull request #13135 from owen-mc/go/fix-unit-test
...
Go: fix unit test
2023-05-16 07:50:50 +01:00
Kasper Svendsen
7c5625a4dc
Go: Make implicit this receivers explicit
2023-05-12 12:14:13 +02:00
Chris Smowton
ee64ea59e1
Merge pull request #12901 from porcupineyhairs/goDsn
...
Go: Add query to detect DSN Injection.
2023-05-11 22:45:43 +01:00
Chris Smowton
820673470e
Merge pull request #13119 from porcupineyhairs/goTiming
...
Go : Add query to detect potential timing attacks
2023-05-11 22:38:13 +01:00
Chris Smowton
99f4eef9c5
Fix spelling
2023-05-11 22:12:35 +01:00
Chris Smowton
a10b11e09e
Fix spelling and remove dead code
2023-05-11 22:12:17 +01:00
Chris Smowton
b6c2db6baf
Fix duplicate query ID
2023-05-11 22:10:09 +01:00
Porcupiney Hairs
2c518c1fa6
Include changes from review
2023-05-12 01:59:42 +05:30
Porcupiney Hairs
ae6fda03b7
Include changes from review
2023-05-11 23:56:50 +05:30
Owen Mansel-Chan
77c8357705
Do not obscure exit code with call to grep
...
The output is a bit more verbose, but this is hard to avoid
2023-05-11 18:15:41 +01:00
Owen Mansel-Chan
3981bb1f58
Indent comment in Makefile better
2023-05-11 17:12:27 +01:00
Owen Mansel-Chan
760ba82c7a
Fix unit tests
2023-05-11 16:40:59 +01:00
Owen Mansel-Chan
1beb348d95
Fix outdated message
2023-05-11 14:29:14 +01:00
Owen Mansel-Chan
02a224c28f
--identify-environment should write json to stdout
2023-05-11 14:29:14 +01:00
Owen Mansel-Chan
874a426779
Add identify-environment scripts
2023-05-11 11:51:42 +01:00
Owen Mansel-Chan
b306807046
Merge pull request #13040 from owen-mc/go/identify-environment-change-logic
...
Go: change logic in `go-autobuilder --identify-environment`
2023-05-11 08:22:01 +01:00
Porcupiney Hairs
d536157c1a
Go : Add query to detect potential timing attacks
2023-05-11 09:57:50 +05:30
Owen Mansel-Chan
5ef74c96de
Merge pull request #13105 from owen-mc/go/change-diagnostic-message
...
Go: Update "go/autobuilder/package-not-found" diagnostic message
2023-05-11 05:27:09 +01:00
Owen Mansel-Chan
270ba09ffb
Merge pull request #11732 from owen-mc/go/fix/model-data-flow-through-varargs
...
Go: Allow data flow through varargs parameters
2023-05-11 05:26:40 +01:00
Porcupiney Hairs
ec424d7e51
Go: Add query to detect DSN Injection.
2023-05-11 03:45:29 +05:30
Owen Mansel-Chan
9334cfb22c
Change logic when go mod version above max supported version
2023-05-10 21:56:56 +01:00
Owen Mansel-Chan
9c5fc9714a
Use "Requesting" instead of "Writing environment file"
2023-05-10 21:53:10 +01:00
Owen Mansel-Chan
97ec7a07eb
Address review comments
2023-05-10 15:53:08 +01:00
Owen Mansel-Chan
1c66564ccc
address review comments
2023-05-10 14:05:09 +01:00
Owen Mansel-Chan
8f41ff36fb
Add change note
2023-05-10 13:50:04 +01:00
Owen Mansel-Chan
50d3cffe61
Accept review comments
2023-05-10 13:28:11 +01:00
Owen Mansel-Chan
fcf3cb7ea4
Update "go/autobuilder/package-not-found" message
2023-05-10 12:24:03 +01:00
Owen Mansel-Chan
375be68492
Fix diagnostics
2023-05-10 11:12:48 +01:00
Owen Mansel-Chan
edebebf603
Refactor for clarity
2023-05-10 11:12:47 +01:00
Owen Mansel-Chan
f9d2467eaa
Downgrade package-not-found diagnostic to warning
...
error is reserved for when the build fails.
2023-05-10 09:58:58 +01:00
Owen Mansel-Chan
12f996ff56
Deal better with goModVersion < minGoVersion
2023-05-10 09:45:48 +01:00
Owen Mansel-Chan
32b5df69c3
Add comments explaining version choice logic
2023-05-10 09:26:18 +01:00
Michael Nebel
4ac0396b67
Go/Python/Ruby/Swift: Sync files and make dummy implementation.
2023-05-08 16:18:59 +02:00
Owen Mansel-Chan
d329da673a
Refactor logic for which version to install
...
This does not change the version returned. In the case the the go mod
version is supported and the go env version is below goMinVersion, the
message now talks about go env version being unsupported instead of
it being less than go mod version. This seems more sensible to me.
2023-05-05 15:44:55 +01:00
