tonghuaroot
e93bc11f6f
Add experimental JS query for SSRF guards missing IPv6-transition unwrap
...
Add javascript/ssrf-ipv6-transition-incomplete-guard, an experimental
@kind problem query that flags hand-rolled SSRF host guards which reject
private/loopback IPv4 ranges but never unwrap IPv6-transition forms
(IPv4-mapped ::ffff:, NAT64 64:ff9b::, 6to4 2002::). Such guards can be
bypassed by wrapping an internal IPv4 address in a transition literal.
Includes a .qhelp with good/bad examples, a change note, and a test pack
with two true-positive fixtures (private-ip package guard and a
hand-written RFC 1918 denylist) and two negative-control fixtures
(ipaddr.js range classifier and an explicit ::ffff: unwrap).
Signed-off-by: tonghuaroot <23011166+tonghuaroot@users.noreply.github.com >
2026-06-06 21:47:24 +08:00
Owen Mansel-Chan
cf6d94cf8a
Merge pull request #21324 from github/copilot/automate-go-version-updates-again
...
Automate Go version updates via scheduled workflow
2026-06-06 03:03:03 +01:00
Owen Mansel-Chan
292fc8b777
Fix detection of failed text replacement
...
I checked and the comment seems to be correct.
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-06 02:52:21 +01:00
Owen Mansel-Chan
a1759d9834
Use --force-with-lease for slightly improved safety
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-06 02:51:36 +01:00
Owen Mansel-Chan
6b74874372
Minor improvement to PR text
2026-06-06 02:32:43 +01:00
copilot-swe-agent[bot]
ef29d22c75
Update Go version workflow to include patch numbers in messages
2026-06-06 01:03:44 +00:00
Henry Mercer
9acf0d6dff
Merge pull request #21946 from github/henrymercer/actions-tweak-query-name
...
Correct query metadata for `actions/untrusted-checkout/medium`
2026-06-05 09:54:27 +01:00
Owen Mansel-Chan
1f91f915c7
Merge pull request #21888 from owen-mc/py/remove-imprecise-container-steps
...
Python: Remove imprecise container steps #2
2026-06-04 22:16:24 +01:00
Jon Janego
ba8eebe2b5
Merge pull request #21948 from github/codeql-spark-run-26974832191
...
Update changelog documentation site for codeql-cli-2.25.6
2026-06-04 14:55:17 -05:00
github-actions[bot]
dc1409e5f4
update codeql documentation
2026-06-04 19:36:45 +00:00
Jon Janego
2a8f295a65
Merge pull request #21947 from github/copilot/codeql-cli-2256
...
Fix changelog copy errors in change-notes and CHANGELOG.md files (codeql-cli-2.25.6)
2026-06-04 14:29:33 -05:00
copilot-swe-agent[bot]
b8501f1ec5
Fix changelog copy errors in change-notes and CHANGELOG.md files (codeql-cli-2.25.6)
2026-06-04 18:35:06 +00:00
copilot-swe-agent[bot]
3214253adb
Initial plan
2026-06-04 18:29:50 +00:00
Henry Mercer
f4dc86e645
Correct query metadata for actions/untrusted-checkout/medium
2026-06-04 19:12:02 +01:00
Mario Campos
284f42bb9e
Merge pull request #21945 from github/codeql-spark-run-26947645690
...
Update changelog documentation site for codeql-cli-2.25.6
2026-06-04 13:09:04 -05:00
Mathias Vorreiter Pedersen
44c8a97e2f
JS: Update test output.
2026-06-04 17:55:09 +01:00
Mathias Vorreiter Pedersen
1d884a3979
QL: Add support for YAML comments.
2026-06-04 17:55:07 +01:00
Mathias Vorreiter Pedersen
8c35e089d8
Unified: Add support for YAML comments.
2026-06-04 17:55:04 +01:00
Mathias Vorreiter Pedersen
e1fde60988
Rust: Add upgrade and downgrade scripts.
2026-06-04 17:55:02 +01:00
Mathias Vorreiter Pedersen
1b29c12049
Rust: Add support for YAML comments.
2026-06-04 17:55:00 +01:00
Mathias Vorreiter Pedersen
d38091fe28
Ruby: Add upgrade and downgrade scripts.
2026-06-04 17:54:57 +01:00
Mathias Vorreiter Pedersen
303cb11609
Ruby: Add support for YAML comments.
2026-06-04 17:54:55 +01:00
Mathias Vorreiter Pedersen
b877943b42
Python: Add upgrade and downgrade scripts.
2026-06-04 17:54:53 +01:00
Mathias Vorreiter Pedersen
0aa1abe432
Python: Add support for YAML comments.
2026-06-04 17:54:48 +01:00
Mathias Vorreiter Pedersen
b6521e7c0e
Actions: Support YAML comments.
2026-06-04 17:54:46 +01:00
Mathias Vorreiter Pedersen
e8f7454ea1
JS: Add tests.
2026-06-04 17:54:42 +01:00
Mathias Vorreiter Pedersen
3a90e8c77e
JS: Add upgrade and downgrade scripts.
2026-06-04 17:54:40 +01:00
Mathias Vorreiter Pedersen
58b1a05985
JS: Support YAML comments.
2026-06-04 17:54:37 +01:00
Henry Mercer
2f3524de74
Merge branch 'rc/3.22' into codeql-spark-run-26947645690
2026-06-04 16:01:11 +01:00
github-actions[bot]
b32573b060
update codeql documentation
2026-06-04 14:57:38 +00:00
BazookaMusic
078d15e165
add openrouter support
2026-06-04 16:42:49 +02:00
Mathias Vorreiter Pedersen
e87f7fb3f7
Shared: Support YAML comments.
2026-06-04 14:53:02 +01:00
Owen Mansel-Chan
c170002fb1
Update test output
2026-06-04 13:52:05 +01:00
Owen Mansel-Chan
14e3ee2fb0
Add change note
2026-06-04 13:39:42 +01:00
Owen Mansel-Chan
50e0354911
Tidy up comments in isSink
2026-06-04 13:39:36 +01:00
Owen Mansel-Chan
101812310c
Inline isCloseCall into isSink
2026-06-04 13:39:24 +01:00
Owen Mansel-Chan
c87bfd5f28
Remove redundant call to isCloseSink
2026-06-04 13:09:10 +01:00
Owen Mansel-Chan
05e21adc53
Accept test changes
2026-06-04 13:09:07 +01:00
Owen Mansel-Chan
f67d0ea961
Go: Account for deferred Close in writable-file-close query
...
A deferred Close runs at function exit, but the CFG splices it in at the exit node where it can be reached along paths that never execute Sync. The previous dominance check therefore produced a false positive when a statement followed the if-block that registered the defer (e.g. deferredCloseWithSync2). For deferred closes, require instead that a handled Sync post-dominates the point where the defer is registered, which guarantees Sync runs before Close on every path on which Close is registered. Non-deferred closes keep the existing dominance check.
2026-06-04 13:09:05 +01:00
Owen Mansel-Chan
5217ede621
Go: Tidy up comments in writable-file-close query
...
Correct the doc for unhandledCall (it also matches expression statements where the result is discarded) and remove a stale commented-out line in isWritableFileHandle.
2026-06-04 13:09:03 +01:00
Owen Mansel-Chan
cd2398aeea
Merge pull request #21936 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-06-04 12:45:21 +01:00
Owen Mansel-Chan
59908124c1
Add test showing limits of DeferStmt in CFG
...
There are paths to the exit of the function which go through the defer
statement and paths which don't, so we add an optional call to the
deferred function. This causes FPs in the query as it stands.
2026-06-04 12:21:38 +01:00
Sotiris Dragonas
d6892eaf0d
Merge pull request #21900 from github/bazookamusic/range-analysis-bound-move-to-shared
...
Bound.qll - Replace utility for range analysis duplicate across java and cs with shared file
2026-06-04 12:45:11 +02:00
BazookaMusic
d2972cb53f
Add back alias for module
2026-06-04 11:08:49 +02:00
github-actions[bot]
5576d30780
Add changed framework coverage reports
2026-06-04 01:04:50 +00:00
Owen Mansel-Chan
da999ee440
Address review comments
2026-06-03 21:24:16 +01:00
Tom Hvitved
3da195f50f
Merge pull request #21918 from hvitved/rust/expose-resolution
...
Rust: Add `Impl::getSelf()` and `Impl::getTrait()`
2026-06-03 20:18:05 +02:00
Henry Mercer
93a4b427e3
Merge pull request #21933 from github/post-release-prep/codeql-cli-2.25.6
...
Post-release preparation for codeql-cli-2.25.6
2026-06-03 16:57:48 +01:00
Tom Hvitved
0430c71318
Merge pull request #21922 from hvitved/rust/static-const-resolution
...
Rust: Path resolution for `static` items
2026-06-03 17:48:21 +02:00
Owen Mansel-Chan
52f2a5825a
Merge pull request #21804 from github/copilot/add-tests-for-models
...
Java: Update CWE-918 model coverage for Apache HttpClient `execute` sinks
2026-06-03 12:55:56 +01:00
