Joe Farebrother
cb733dcf85
Simplify model defenition
2024-02-26 14:59:03 +00:00
Cornelius Riemenschneider
4bb725cbf5
Merge pull request #15656 from github/criemen/ruby-bazel
...
Ruby: Start building the language pack using bazel.
2024-02-26 15:52:28 +01:00
Cornelius Riemenschneider
234623ec0d
Merge pull request #15726 from github/criemen/js
...
JS: Remove empty build target.
2024-02-26 15:50:31 +01:00
Geoffrey White
5c4543f167
C++: Mark internal files in the old dataflow library as deprecated (the public imports already are).
2024-02-26 14:49:10 +00:00
Cornelius Riemenschneider
e9b5394cd5
JS: Remove empty build target.
...
The `resources` folder never existed, this was probably introduced
as a copy-paste mistake. Remove the rule.
2024-02-26 15:26:44 +01:00
Harry Maclean
6ff0054e52
Merge pull request #13431 from am0o0/amammad-ruby-YAMLunsafeLoad
...
Ruby: add seperate additional steps between `YAML.parse*` methods and `to_ruby`
2024-02-26 13:40:48 +00:00
Tom Hvitved
f92c106972
Merge pull request #15724 from hvitved/csharp-change-note
...
C#: Add change note
2024-02-26 14:35:38 +01:00
Harry Maclean
8212f5de1b
Ruby: Update test
2024-02-26 13:10:27 +00:00
Harry Maclean
b86643fab2
Ruby: doc fixes
2024-02-26 12:57:21 +00:00
Michael Nebel
cba247788a
C#: Add change note.
2024-02-26 13:51:07 +01:00
Michael Nebel
f9934ed5e7
C#: Add downgrade script.
2024-02-26 13:51:07 +01:00
Michael Nebel
4dd368f7a6
C#: Add upgrade script.
2024-02-26 13:51:07 +01:00
Michael Nebel
80513d846d
C#: Update PrintAst test expected outputs.
2024-02-26 13:51:07 +01:00
Michael Nebel
ff32cf90fd
C#: Add a test for compiler generated statements.
2024-02-26 13:51:06 +01:00
Michael Nebel
e6f4263eff
C#: Do not print compiler generated statements.
2024-02-26 13:51:06 +01:00
Michael Nebel
bf4e3a7d1c
C#: Merge expr_compiler_generated and compiler_generated and add compiler generated statements.
2024-02-26 13:51:06 +01:00
Tom Hvitved
dd0c721e8c
C#: Add change note
2024-02-26 13:48:19 +01:00
Anders Schack-Mulligen
20bb631456
Dataflow: Prevent bad join.
2024-02-26 13:45:19 +01:00
Tom Hvitved
606a8fed0c
Merge pull request #15406 from hvitved/csharp/no-stats-experiment
...
C#: Remove all DB stats
2024-02-26 13:40:37 +01:00
Harry Maclean
8a670fe9a2
Ruby: formatting
2024-02-26 12:26:04 +00:00
Michael Nebel
e5e0b4c537
C#: Add some examples of uses of the Experimental attribute and update the expected test output.
2024-02-26 13:15:55 +01:00
Michael Nebel
bc98712da5
C#: Add one more using statement to the attributes test file.
2024-02-26 13:14:03 +01:00
amammad
32f5667bb6
revert YAML.qll and yaml sinks to previous PR, make a separate experimental query only for yaml
2024-02-26 12:12:03 +00:00
amammad
c582ea626d
update expected test file
2024-02-26 12:10:04 +00:00
amammad
1c1a6f13df
fix QLDoc style
2024-02-26 12:05:35 +00:00
amammad
9c5c8c8362
fix test file
2024-02-26 12:05:35 +00:00
amammad
464e2e4291
fix qldoc and test files
2024-02-26 12:04:52 +00:00
Alvaro Muñoz
c29f3a7779
Merge pull request #21 from GitHubSecurityLab/refactor_env_access
...
refactor env access
2024-02-26 13:02:33 +01:00
amammad
18fa91bde4
add transform method that is an alias for to_ruby
2024-02-26 11:59:41 +00:00
amammad
a75a004942
add more additional steps, change parse* sinks to reciever of them
2024-02-26 11:59:41 +00:00
amammad
474a4f8abd
thanks @asgerf for informing me that Successor wants to be deprecated and thank him that providing the solution
2024-02-26 11:59:41 +00:00
amammad
1410574f76
make seperate steps for YAML.parse* and use getAsuccessor*() to reach final to_ruby method call, All parts have Rewritten with API graphs exclusively
2024-02-26 11:59:35 +00:00
Harry Maclean
f7b8e8af41
Ruby: Include request forgery sinks from MaD
2024-02-26 11:34:11 +00:00
Harry Maclean
8bed3fbed4
Ruby: Add basic model for Terrapin library
2024-02-26 11:32:41 +00:00
Harry Maclean
9d13a1ff51
Ruby: Add model for Process.spawn
2024-02-26 11:26:38 +00:00
Harry Maclean
d1847566b6
Ruby: Ql4QL fix
2024-02-26 11:26:38 +00:00
Harry Maclean
beef9965cc
Ruby: Model Open4 library
...
Also remove duplicate modeling of Process.spawn.
2024-02-26 11:26:38 +00:00
Harry Maclean
a03c06802e
Ruby: Add some more command injection sinks
2024-02-26 11:26:38 +00:00
Cornelius Riemenschneider
1657b314c1
Re-pin ruby extractor deps.
2024-02-26 11:21:23 +00:00
Cornelius Riemenschneider
688b9955a0
Address review, start accomodating bzlmod.
2024-02-26 11:21:23 +00:00
Cornelius Riemenschneider
b82ffd40e7
Fix windows CI build.
...
As we're now checking out the `codeql` repo in a sub-path,
we need to enable long paths on Windows.
2024-02-26 11:21:23 +00:00
Cornelius Riemenschneider
fd85c44129
Ruby: Start building the language pack using bazel.
...
This PR introduces a bazel and `rules_rust`-based build system
for the ruby extractor and language pack.
This replacese the existing, `cargo` and `cross`-based build system.
For local development, nothing changes, and the existing `cargo`-based
build still keeps working as-is.
We no longer need to use `cross` to compile our Linux binaries,
as we now can link against our hermetic C++ toolchain, which ships
with an old enough glibc, so that we don't run into symbol version issues
when deploying the binaries to older systems.
Besides the one change in dependency (explained in detail in `Cargo.toml`
and in https://github.com/github/codeql/pull/15595 ), nothing ought to
change in how we build the extractor.
2024-02-26 11:21:22 +00:00
Joe Farebrother
386defc3c7
Update test output
2024-02-26 11:21:03 +00:00
Anders Schack-Mulligen
c22cbf5b01
Merge pull request #15721 from aschackmull/workflows/format-check-shared
...
Workflows: Run format check on shared.
2024-02-26 12:12:29 +01:00
Joe Farebrother
fb06e9f6b2
Merge pull request #15719 from joefarebrother/ruby-changenote-formatting
...
Ruby: Fix change note formatting
2024-02-26 11:12:01 +00:00
Harry Maclean
dd092fd18f
Ruby: Fix CSRF test
2024-02-26 11:02:54 +00:00
Jeroen Ketema
acf3a99dff
Merge pull request #15716 from jketema/command-line-options
...
C++: Update test after extractor changes
2024-02-26 12:01:03 +01:00
Rasmus Wriedt Larsen
4ede553b21
Merge pull request #15365 from RasmusWL/lgtm_index_filter_handling
...
Tree sitter extractor: Proper handling of `LGTM_INDEX_FILTERS`
2024-02-26 11:59:45 +01:00
Tom Hvitved
5f5bcf686d
Update csharp/ql/lib/semmle/code/csharp/AnnotatedType.qll
...
Co-authored-by: Michael Nebel <michaelnebel@github.com >
2024-02-26 11:35:28 +01:00
Anders Schack-Mulligen
dab8e237e6
Workflows: Run format check on shared.
2024-02-26 11:33:00 +01:00
