Jaroslav Lobačevski
ab20625b8f
Fix the upper bound of the range
2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski
55df2b4302
Change notes
2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski
83d13c6f20
Fix lower range for known vulnerable actions
2025-01-22 17:30:19 +01:00
Michael Recachinas
b2de1e9b9e
Change includes paths in autobuild.sh
2025-01-22 11:25:21 -05:00
Óscar San José
ebb10e3318
Merge pull request #18525 from github/oscarsj/upgrade-workflows-to-ubuntu24
...
Upgrade workflows to ubuntu-24
2025-01-22 16:50:48 +01:00
Jaroslav Lobačevski
6d94168ad9
gh view
2025-01-21 17:15:41 +00:00
github-actions[bot]
fbb7f0a0c6
Post-release preparation for codeql-cli-2.20.2
2025-01-20 21:11:14 +00:00
github-actions[bot]
a0512a50f2
Release preparation for version 2.20.2
2025-01-20 21:11:12 +00:00
Jaroslav Lobačevski
88529d42d0
Remove comparison
2025-01-20 16:28:35 +00:00
Jaroslav Lobačevski
facceb6c2d
Change note
2025-01-20 15:08:12 +00:00
Jaroslav Lobačevski
da9d612a47
Improve bash support
2025-01-20 14:59:30 +00:00
docs-bot
8b5bed1a46
Add actions-security-experimental.qls
2025-01-17 09:47:44 -05:00
Simon Friis Vindum
53b63bed00
Actions: Implement added predicates in CFG instantiation
2025-01-17 13:31:00 +01:00
Óscar San José
b39bfdbb04
Upgrade workflows to ubuntu-24
2025-01-17 11:22:15 +01:00
Chad Bentz
1a4c2058a0
codeql query format
2025-01-09 19:39:06 -05:00
Chad Bentz
f413c4f467
Remove codeql config references from query doc
2025-01-09 19:32:06 -05:00
Chad Bentz
26074bb7fe
Make docs less verbose regarding codeql config + enhance changlog to highlight extensibility
2025-01-09 19:30:02 -05:00
Chad Bentz
b144c2f597
Merge branch 'github:main' into felickz/actions-trusted-owner-data-extensions
2025-01-09 15:07:49 -05:00
Chad Bentz
6b3098d26c
Add configuration instructions for trusted Action publishers using data extensions
2025-01-07 19:26:18 -05:00
Chad Bentz
bccec0a711
Format
2025-01-07 17:25:40 -05:00
Chad Bentz
3e94a4c2bf
Refactor trusted actions owner model
...
- use existing data extensions config and yml folder
- rename from trustedActionsOwner to trustedActionsOwnerDataModel
- update related predicates
2025-01-07 17:22:24 -05:00
github-actions[bot]
fb20f6ca63
Post-release preparation for codeql-cli-2.20.1
2025-01-07 22:07:40 +00:00
Chad Bentz
35587ed3e7
Format lib
2025-01-07 17:02:37 -05:00
Chad Bentz
e4cfd97069
Format
2025-01-07 17:01:33 -05:00
Chad Bentz
8f9aecd76f
Add change notes for expanding Trusted Action owner list using data extensions
2025-01-07 15:55:58 -05:00
github-actions[bot]
88b6f1e79a
Release preparation for version 2.20.1
2025-01-07 20:50:36 +00:00
Chad Bentz
22e7b9a825
Convert trusted actions list to data extension
2025-01-07 15:35:12 -05:00
Dave Bartolomeo
72a53c4b23
Revert "Release preparation for version 2.20.1"
2025-01-07 13:32:23 -05:00
github-actions[bot]
fbf9f2fff8
Release preparation for version 2.20.1
2025-01-07 17:20:13 +00:00
Dave Bartolomeo
22e030584c
Revert "Release preparation for version 2.20.1"
2025-01-07 12:14:27 -05:00
github-actions[bot]
a121c5a5d0
Release preparation for version 2.20.1
2025-01-06 18:20:22 +00:00
Dave Bartolomeo
90efbf5172
Update suites for Actions queries
2024-12-20 14:37:46 -05:00
Dave Bartolomeo
e9a04b8839
Mark UnversionedImmutableAction query as internal
2024-12-20 14:37:32 -05:00
Kylie Stradley
690924f72b
Update actions/ql/src/Security/CWE-829/UnversionedImmutableAction.md
...
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com >
2024-12-20 12:04:42 -05:00
Kylie Stradley
dc705ad623
indicate immutable actions are only available for internal use at this time
2024-12-20 11:19:15 -05:00
Kylie Stradley
2dd3adac51
clarify immutable actions help text
2024-12-20 09:51:51 -05:00
Dave Bartolomeo
e4bce701a0
Add change notes
2024-12-19 10:53:23 -05:00
Dave Bartolomeo
8b132274b5
Revert "Accept DB consistency check for now"
...
This reverts commit dba6f0bb9f
2024-12-19 09:47:42 -05:00
Dave Bartolomeo
dba6f0bb9f
Accept DB consistency check for now
...
Failure tracked in https://github.com/github/codeql-team/issues/3655
2024-12-18 16:54:34 -05:00
Dave Bartolomeo
4743dfa601
Fix result of getAPrimaryQlClass()
2024-12-18 16:22:37 -05:00
Dave Bartolomeo
a66ba4ebae
Remove printCfg.ql
...
This file not yet fully implemented and does not compile
2024-12-18 16:11:54 -05:00
Dave Bartolomeo
99bdef1268
Fix compilation warnings
2024-12-18 15:56:49 -05:00
Dave Bartolomeo
d66cb7e8c7
Fix formatting
2024-12-18 15:48:34 -05:00
Dave Bartolomeo
7891134a87
Fix formatting
2024-12-18 15:43:53 -05:00
Dave Bartolomeo
47e364a13b
Remove placeholder code
2024-12-18 14:51:24 -05:00
Dave Bartolomeo
c7efe5d0f5
Update lock files
2024-12-18 14:42:13 -05:00
Dave Bartolomeo
dbc1fa6450
Merge Actions queries from github/codeql-actions
2024-12-18 14:39:43 -05:00
Dave Bartolomeo
ee7680df84
Move into actions subdirectory to prepare for migration to github/codeql
2024-12-18 14:35:15 -05:00
Paolo Tranquilli
918b0bfc53
Bazel: add experimental to codeql_pack
2024-11-19 12:48:36 +01:00
Paolo Tranquilli
6e33f979c7
Bazel: add an installer shortcut to codeql_pack
...
This makes the first `codeql_pack` in a package add an `installer` target
aliasing the `<name>-installer` one. This makes it so that one can for
example do `bazel run //rust:installer` instead of the stuttering
`bazel run //rust:rust-installer`. If a bazel package defines multiple
`codeql_pack` targets, the first one only will get the `installer` alias.
2024-11-19 10:25:31 +01:00
