Jami Cogswell
|
76f5dca861
|
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
7b629f5d63
|
Shared: include 'qltest%' and 'test-%'
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
76508d17c6
|
Go/Swift: validate source/sink kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
615f2a573b
|
Java/C#/Go/Swift: remove commented-out code
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
7317c29eea
|
Shared: update kind information
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
79f61cc645
|
Java/C#/Go/Swift: use 'SharedModelValidation' file
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
ddb5d92ef8
|
Shared: add source, summary, and neutral shared valid kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
869f820fcf
|
Shared: add 'SharedModelValidation' file as experiment
|
2023-06-05 12:18:33 -04:00 |
|
Michael B. Gale
|
06d48dca67
|
Merge pull request #13211 from github/mbg/identify-environment-stubs
Shared: Add stubs for `identify-environment` scripts
|
2023-06-05 10:29:06 +01:00 |
|
Maiky
|
1a9bfb38aa
|
Correct barrier
|
2023-06-05 01:25:17 +02:00 |
|
Maiky
|
bf9d0b93d7
|
Add Improper LDAP Auth Query (CWE-287)
|
2023-06-03 23:20:11 +02:00 |
|
Jeroen Ketema
|
7b17b92aca
|
Fix typo in spelling of expectation
|
2023-06-02 10:36:11 +02:00 |
|
Michael Nebel
|
06b02eb3ce
|
Sync files.
|
2023-06-01 09:30:31 +02:00 |
|
Arthur Baars
|
c211b704f3
|
Merge pull request #13272 from github/post-release-prep/codeql-cli-2.13.3
Post-release preparation for codeql-cli-2.13.3
|
2023-05-31 15:33:12 +02:00 |
|
Michael Nebel
|
915042a881
|
Minor cleanup and sync files.
|
2023-05-26 12:25:00 +02:00 |
|
Michael Nebel
|
b794627335
|
Go: Re-factor getComponent.
|
2023-05-26 12:24:59 +02:00 |
|
Michael B. Gale
|
631ba6584d
|
Go: Update identify-environment JSON format
The spec changed after this was implemented and merged
|
2023-05-26 10:13:40 +01:00 |
|
Michael B. Gale
|
af803c8886
|
Go: include new scripts in Makefile
|
2023-05-26 10:13:40 +01:00 |
|
github-actions[bot]
|
d2e192020b
|
Post-release preparation for codeql-cli-2.13.3
|
2023-05-24 11:26:12 +00:00 |
|
Chris Smowton
|
99c211955b
|
Hotfix: Go: exclude method receivers from dead-store-of-field query
|
2023-05-23 14:31:25 +01:00 |
|
Chris Smowton
|
8b28848c82
|
Merge pull request #13250 from smowton/smowton/hotfix/golang-field-store-varargs-function
Hotfix: Go: count passing to a vararg function as escaping
|
2023-05-23 12:03:48 +01:00 |
|
Chris Smowton
|
d5d56cde5a
|
Dead store of field: count passing to a vararg function as escaping
|
2023-05-23 10:51:21 +01:00 |
|
github-actions[bot]
|
7aa23cf11d
|
Release preparation for version 2.13.3
|
2023-05-22 20:47:00 +00:00 |
|
Owen Mansel-Chan
|
1a9bd9ccde
|
Merge pull request #13135 from owen-mc/go/fix-unit-test
Go: fix unit test
|
2023-05-16 07:50:50 +01:00 |
|
Kasper Svendsen
|
7c5625a4dc
|
Go: Make implicit this receivers explicit
|
2023-05-12 12:14:13 +02:00 |
|
Chris Smowton
|
ee64ea59e1
|
Merge pull request #12901 from porcupineyhairs/goDsn
Go: Add query to detect DSN Injection.
|
2023-05-11 22:45:43 +01:00 |
|
Chris Smowton
|
820673470e
|
Merge pull request #13119 from porcupineyhairs/goTiming
Go : Add query to detect potential timing attacks
|
2023-05-11 22:38:13 +01:00 |
|
Chris Smowton
|
99f4eef9c5
|
Fix spelling
|
2023-05-11 22:12:35 +01:00 |
|
Chris Smowton
|
a10b11e09e
|
Fix spelling and remove dead code
|
2023-05-11 22:12:17 +01:00 |
|
Chris Smowton
|
b6c2db6baf
|
Fix duplicate query ID
|
2023-05-11 22:10:09 +01:00 |
|
Porcupiney Hairs
|
2c518c1fa6
|
Include changes from review
|
2023-05-12 01:59:42 +05:30 |
|
Porcupiney Hairs
|
ae6fda03b7
|
Include changes from review
|
2023-05-11 23:56:50 +05:30 |
|
Owen Mansel-Chan
|
77c8357705
|
Do not obscure exit code with call to grep
The output is a bit more verbose, but this is hard to avoid
|
2023-05-11 18:15:41 +01:00 |
|
Owen Mansel-Chan
|
3981bb1f58
|
Indent comment in Makefile better
|
2023-05-11 17:12:27 +01:00 |
|
Owen Mansel-Chan
|
760ba82c7a
|
Fix unit tests
|
2023-05-11 16:40:59 +01:00 |
|
Owen Mansel-Chan
|
1beb348d95
|
Fix outdated message
|
2023-05-11 14:29:14 +01:00 |
|
Owen Mansel-Chan
|
02a224c28f
|
--identify-environment should write json to stdout
|
2023-05-11 14:29:14 +01:00 |
|
Owen Mansel-Chan
|
874a426779
|
Add identify-environment scripts
|
2023-05-11 11:51:42 +01:00 |
|
Owen Mansel-Chan
|
b306807046
|
Merge pull request #13040 from owen-mc/go/identify-environment-change-logic
Go: change logic in `go-autobuilder --identify-environment`
|
2023-05-11 08:22:01 +01:00 |
|
Porcupiney Hairs
|
d536157c1a
|
Go : Add query to detect potential timing attacks
|
2023-05-11 09:57:50 +05:30 |
|
Owen Mansel-Chan
|
5ef74c96de
|
Merge pull request #13105 from owen-mc/go/change-diagnostic-message
Go: Update "go/autobuilder/package-not-found" diagnostic message
|
2023-05-11 05:27:09 +01:00 |
|
Owen Mansel-Chan
|
270ba09ffb
|
Merge pull request #11732 from owen-mc/go/fix/model-data-flow-through-varargs
Go: Allow data flow through varargs parameters
|
2023-05-11 05:26:40 +01:00 |
|
Porcupiney Hairs
|
ec424d7e51
|
Go: Add query to detect DSN Injection.
|
2023-05-11 03:45:29 +05:30 |
|
Owen Mansel-Chan
|
9334cfb22c
|
Change logic when go mod version above max supported version
|
2023-05-10 21:56:56 +01:00 |
|
Owen Mansel-Chan
|
9c5fc9714a
|
Use "Requesting" instead of "Writing environment file"
|
2023-05-10 21:53:10 +01:00 |
|
Owen Mansel-Chan
|
97ec7a07eb
|
Address review comments
|
2023-05-10 15:53:08 +01:00 |
|
Owen Mansel-Chan
|
1c66564ccc
|
address review comments
|
2023-05-10 14:05:09 +01:00 |
|
Owen Mansel-Chan
|
8f41ff36fb
|
Add change note
|
2023-05-10 13:50:04 +01:00 |
|
Owen Mansel-Chan
|
50d3cffe61
|
Accept review comments
|
2023-05-10 13:28:11 +01:00 |
|
Owen Mansel-Chan
|
fcf3cb7ea4
|
Update "go/autobuilder/package-not-found" message
|
2023-05-10 12:24:03 +01:00 |
|