Alvaro Muñoz
3814462266
feat(triggers): New query for critical issues
...
Adds a new query and the required changes to be able to account for the trigger events so that we dont report issues if they are not likely exploitable.
2024-02-21 10:23:37 +01:00
Jeroen Ketema
57cb7f8218
C++: Update tests after extractor changes related to static variables
2024-02-21 10:22:59 +01:00
Jeroen Ketema
c1f18edfed
C++: Add IR tests for destruction of static locals
2024-02-21 10:22:59 +01:00
Alvaro Muñoz
4b9cec79dc
Merge pull request #17 from GitHubSecurityLab/reusable_workflow_models
...
feat(reusable-workflow-models): Reusable workflow MaD
2024-02-21 10:20:40 +01:00
Michael Nebel
f072e41d50
Merge pull request #15652 from michaelnebel/csharp/constructorflow
...
C#: Read-only property flow.
2024-02-21 10:12:46 +01:00
Tamas Vajk
e1e29f277c
C#: Modify reported assembly paths in integration tests
2024-02-21 09:39:19 +01:00
Michael Nebel
060133d3e9
C#: Add change note.
2024-02-21 09:34:21 +01:00
Tamás Vajk
70a2d16b1a
Merge pull request #15600 from tamasvajk/buildless/no-mono-dlls
...
C# Change desktop dotnet assembly lookup to fall back to nuget reference assemblies
2024-02-21 08:36:41 +01:00
Paolo Tranquilli
c5ed96b4f8
Merge branch 'main' into redsun82/bzlmod
2024-02-21 06:22:10 +01:00
Chris Smowton
f2e04c0cb2
Merge pull request #15672 from github/post-release-prep/codeql-cli-2.16.3
...
Post-release preparation for codeql-cli-2.16.3
2024-02-20 21:59:55 +00:00
amammad
4c769f2b09
update tests
2024-02-21 01:10:35 +04:00
amammad
3307457deb
use implements predicate for io interfaces,
...
so we can reduce many repetitive parts of query
2024-02-21 01:07:31 +04:00
amammad
13b0a9a842
New testcase 's2Reader.ReadByte()'
2024-02-21 01:05:57 +04:00
Alvaro Muñoz
a2210dca79
feat(triggers): Add getEnclosingWorkflowStmt to Statement class
2024-02-20 21:48:29 +01:00
amammad
905420143b
call functions in the same order as the function declarations
2024-02-21 00:19:51 +04:00
Edward Minnix III
c5dbaa6bfd
Docs team review suggestions
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2024-02-20 14:17:06 -05:00
Ed Minnix
8be9b8b818
Add note about collapsing multiple rows into one
2024-02-20 14:17:05 -05:00
Ed Minnix
e2511cdbe4
Add neutral model note to C# documentation
2024-02-20 14:17:04 -05:00
Ed Minnix
8058096d7d
Add note about neutrals to Java documentation
2024-02-20 14:17:02 -05:00
Edward Minnix III
6665248c19
Review suggestions
...
Co-authored-by: Michael Nebel <michaelnebel@github.com >
2024-02-20 14:17:01 -05:00
Ed Minnix
ae59ea3152
Oxford comma
2024-02-20 14:17:00 -05:00
Ed Minnix
3f10dd06f2
Correct indices in example
2024-02-20 14:16:59 -05:00
Ed Minnix
65db990c97
Remove threat model mentions
2024-02-20 14:16:57 -05:00
Ed Minnix
bb86ce5749
Remove references to model editor
2024-02-20 14:16:56 -05:00
Ed Minnix
698109ae10
Introduce C# MaD documentation
2024-02-20 14:16:55 -05:00
Ed Minnix
77ef63a051
Modify Java docs to use common models-as-data beta notice
2024-02-20 14:16:53 -05:00
Ed Minnix
54d7805e4a
Modify Java threat model link to be Java-specific
2024-02-20 14:16:51 -05:00
yoff
d3ee5f65db
Merge pull request #15550 from yoff/python/remove-pointsto-from-module-getAnExport
...
python: remove a use of points-to
2024-02-20 19:04:46 +01:00
github-actions[bot]
37f8fa3413
Post-release preparation for codeql-cli-2.16.3
2024-02-20 16:50:47 +00:00
Joe Farebrother
10da4d14d9
Add addtional arguments as sinks to certain methods
2024-02-20 16:35:29 +00:00
Pierre
2da00986c0
Merge pull request #15664 from alexrford/rb/rm-library-models-cust-docs
...
Ruby: remove `customizing-library-models-for-ruby.rst`
2024-02-20 17:03:18 +01:00
Ian Lynagh
fbf70c688f
Kotlin 2: Accept changes in library-tests/operator-overloads
...
This also brings the Kotlin 2 output back in line with the Kotlin 1
output.
2024-02-20 15:41:22 +00:00
Ian Lynagh
67d0415942
Kotlin 2: Accept loc changes in library-tests/interface-delegate
...
We lose a location here, but this makes the Kotlin 2 results more
similar to the Kotlin 1 results.
2024-02-20 15:27:43 +00:00
Pierre
0d734983b4
Merge branch 'main' into rb/rm-library-models-cust-docs
2024-02-20 16:20:41 +01:00
Chris Smowton
8a00a45b32
Merge pull request #15666 from github/release-prep/2.16.3
...
Release preparation for version 2.16.3
2024-02-20 15:15:41 +00:00
Michael Nebel
d6f657cfd7
C#: Update expected test output.
2024-02-20 15:55:19 +01:00
Michael Nebel
e4d41194b4
C#: Include store steps into readonly properties.
2024-02-20 15:55:19 +01:00
Michael Nebel
3112bf4682
C#: Add some test property inititialization test cases and update expected output.
2024-02-20 15:55:19 +01:00
Geoffrey White
5787dcc82d
C++: Make getStaticCallTarget() return a DataFlowCallable.
2024-02-20 14:49:51 +00:00
Geoffrey White
356214c11b
C++: Implement SummaryReturnNode.
2024-02-20 14:48:02 +00:00
Geoffrey White
5683092d6a
C++: Implement SummaryParameterNode.
2024-02-20 14:48:02 +00:00
Geoffrey White
1ace9ee50f
C++: Create a proper class for DataFlowCallable, that includes summarized callables.
2024-02-20 14:48:02 +00:00
Geoffrey White
e1a5a84253
C++: Create a proper class for DataFlowCall, that includes summarized callables.
2024-02-20 14:48:02 +00:00
github-actions[bot]
6d061fbc35
Release preparation for version 2.16.3
2024-02-20 14:26:23 +00:00
Michael Nebel
ed3dba8334
Merge pull request #15625 from michaelnebel/csharp/primaryconstructorinitializer
...
C# 12: Primary constructor inititalizers.
2024-02-20 15:12:19 +01:00
Max Schaefer
75f66c2191
Add four more sink types.
2024-02-20 13:48:20 +00:00
Anders Schack-Mulligen
5a348a5048
Dataflow: SimpleGlobal / Typetracker perf fix.
2024-02-20 14:40:28 +01:00
Tamás Vajk
029db218fe
Merge pull request #15650 from tamasvajk/buildless/fallback-nuget-install
...
C#: Add fallback logic to `nuget install`
2024-02-20 14:26:44 +01:00
Owen Mansel-Chan
e6f9ef5042
Merge pull request #15643 from owen-mc/java/sensitive-logging
...
Java: Sensitive Logging: Simplify definition of source and improve QLDoc
2024-02-20 13:24:23 +00:00
Alex Ford
5b46256fdb
Ruby: remove customizing-library-models-for-ruby.rst
2024-02-20 13:12:23 +00:00
