Owen Mansel-Chan
94f290411f
Use post-process provenance pretty-printing in qlref tests
2024-07-30 11:35:09 +01:00
Owen Mansel-Chan
9cb01d4573
Merge branch 'main' into go/mad/convert-sinks
2024-07-30 08:03:18 +01:00
Owen Mansel-Chan
f307f272d5
Go: Use provenance pretty-printing as a qltest post-process step
2024-07-28 21:31:50 +01:00
Owen Mansel-Chan
6960c5232b
Go: Add support for provenance pretty-printing as a qltest post-process step
2024-07-28 21:31:50 +01:00
Owen Mansel-Chan
1aa63c3f2e
Accept model numbering changes
2024-07-25 14:55:50 +01:00
Owen Mansel-Chan
a6cb511ed7
Convert XPath injection sinks to MaD
2024-07-25 12:56:06 +01:00
Owen Mansel-Chan
f3069c8fbb
Improve XPath injection test (incl extra sinks)
...
Currently the extra sinks are not detected. This will be fixed in the
next commit.
2024-07-25 12:55:05 +01:00
Owen Mansel-Chan
78b66abad3
Convert existing credentials sinks to MaD
...
I checked that the tests failed when I removed the classes and passed
again when I add the MaD models.
2024-07-25 12:53:16 +01:00
Owen Mansel-Chan
93c9910e6f
Convert go/request-forgery sinks to MaD
2024-07-25 12:53:15 +01:00
Owen Mansel-Chan
f7d681516a
Allow MaD sinks for go/request-forgery
...
Request forgery sinks which have `getRequest` different from the sink
itself cannot be modeled using models-as-data.
2024-07-25 12:53:14 +01:00
Anders Schack-Mulligen
7a48fe1102
Dataflow: Replace ppReprType with DataFlowType.toString.
2024-07-25 13:08:47 +02:00
github-actions[bot]
49cc8f8ff8
Post-release preparation for codeql-cli-2.18.1
2024-07-22 22:00:48 +00:00
github-actions[bot]
368bcb684a
Release preparation for version 2.18.1
2024-07-22 21:30:50 +00:00
Chuan-kai Lin
23320b6e5e
Revert "Release preparation for version 2.18.1"
2024-07-22 13:22:49 -07:00
github-actions[bot]
55935fc123
Release preparation for version 2.18.1
2024-07-22 14:56:15 +00:00
github-actions[bot]
f83b70dbc2
Add changed framework coverage reports
2024-07-20 00:17:36 +00:00
Owen Mansel-Chan
24261b29d5
Merge pull request #17012 from owen-mc/go/mad/convert-sources-websockets
...
Go: convert models for websocket readers as remote flow sources to models-as-data
2024-07-19 10:04:27 +01:00
Michael Nebel
2796597d1a
Code quality improvements.
2024-07-19 09:36:17 +02:00
Michael B. Gale
3a9ff64780
Go: Output stdout/stderr for go version if something goes wrong
2024-07-18 15:37:59 +01:00
Michael Nebel
ca4bd0c606
C#/Java/Go: Neutrals are split into seperate classes.
2024-07-18 16:29:38 +02:00
Owen Mansel-Chan
cb0589dfb7
Tests: accept model numbering changes
2024-07-18 11:35:52 +01:00
Owen Mansel-Chan
fc17b905f0
Convert WebSocketReaderAsSource to MaD
2024-07-18 10:53:13 +01:00
Owen Mansel-Chan
0a2ed8302a
Add test for websocket remote flow sources
2024-07-18 07:45:03 +01:00
Owen Mansel-Chan
1e4aadfbfd
Trivial: improve variable name
2024-07-18 07:44:19 +01:00
Owen Mansel-Chan
8bc883274f
Minor improvement to jsoniter test
2024-07-18 07:38:23 +01:00
github-actions[bot]
ca42eac589
Add changed framework coverage reports
2024-07-18 00:17:53 +00:00
Owen Mansel-Chan
433137ada6
Merge pull request #16960 from owen-mc/go/mad-sources-fasthttp
...
Go: Convert fasthttp sources to MaD
2024-07-17 21:31:49 +01:00
dependabot[bot]
3641dfebff
Bump the extractor-dependencies group across 1 directory with 2 updates
...
Bumps the extractor-dependencies group with 2 updates in the /go/extractor directory: [golang.org/x/mod](https://github.com/golang/mod ) and [golang.org/x/tools](https://github.com/golang/tools ).
Updates `golang.org/x/mod` from 0.15.0 to 0.19.0
- [Commits](https://github.com/golang/mod/compare/v0.15.0...v0.19.0 )
Updates `golang.org/x/tools` from 0.18.0 to 0.23.0
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.18.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/mod
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-17 11:46:01 +00:00
Paolo Tranquilli
bf69c76829
Merge pull request #16987 from github/redsun82/go
...
Go/Bazel: use gazelle `go_deps` instead of a vendor directory
2024-07-17 13:44:23 +02:00
Owen Mansel-Chan
d109b1e20d
Accept model numbering changes in tests
2024-07-17 12:37:23 +01:00
Owen Mansel-Chan
6b52cd4957
Do not use "request" threat model kind
...
It is not supported yet.
2024-07-17 12:12:00 +01:00
Owen Mansel-Chan
cfdd48711b
Convert Fasthttp::RequestHeader::RemoteFlowSource to MaD
2024-07-17 12:11:59 +01:00
Owen Mansel-Chan
abeca3d9f9
Convert Fasthttp::RequestCtx::RemoteFlowSource to MaD
2024-07-17 12:11:58 +01:00
Owen Mansel-Chan
729069e3d9
Convert Fasthttp::Request::RemoteFlowSource to MaD
2024-07-17 12:11:57 +01:00
Owen Mansel-Chan
c3169d258f
Convert Fasthttp::Args::RemoteFlowSource to MaD
2024-07-17 12:11:57 +01:00
Owen Mansel-Chan
5a00b5ec96
Convert Fasthttp::URI::RemoteFlowSource to MaD
2024-07-17 12:11:56 +01:00
Owen Mansel-Chan
f33927457f
Adapt test to work better for MaD
...
In MaD, `Argument[n]` corresponds to the post-update node of the
argument, which in the old version of the test will be the definition of
`dstReader` for the tests for `ReadBody`, `ReadLimitBody`,
`ContinueReadBodyStream`, `ContinueReadBody`.
2024-07-17 12:11:55 +01:00
Owen Mansel-Chan
a8a4a201bd
Merge pull request #16992 from owen-mc/go/mad/use-package-grouping
...
Go: use package grouping in existing models-as-data models
2024-07-17 12:08:26 +01:00
Owen Mansel-Chan
f67026f2ad
Accept model numbering changes in tests
2024-07-17 11:02:28 +01:00
Owen Mansel-Chan
4c3220ea9d
Use package grouping in models for gocb
2024-07-17 10:36:38 +01:00
Owen Mansel-Chan
4b2075bfb1
Split models for separate protobuf packages into separate files
2024-07-17 10:36:37 +01:00
Owen Mansel-Chan
aa0749e4ba
Use package grouping for go-jose/jwt models
2024-07-17 10:36:37 +01:00
Owen Mansel-Chan
8a5a9418c7
Add frameworks to frameworks.csv
2024-07-17 10:20:44 +01:00
Owen Mansel-Chan
e6c7e1a0bc
Merge pull request #16990 from owen-mc/go/change-string-prefix-check
...
Go: Change string prefix check
2024-07-17 09:57:45 +01:00
Owen Mansel-Chan
fc6b17ad64
Test: accept model numbers changing
2024-07-16 21:36:12 +01:00
Owen Mansel-Chan
535b4ea986
Convert net/http UserControlledRequestField sources to MaD
2024-07-16 16:53:02 +01:00
Owen Mansel-Chan
873fd6646b
Convert Revel::UserControlledRequestMethod sources to MaD
2024-07-16 16:53:01 +01:00
Owen Mansel-Chan
034f2d4221
Convert Revel field read sources to MaD
2024-07-16 16:53:01 +01:00
Owen Mansel-Chan
2da1de7b13
Use packageGrouping in Revel models
2024-07-16 16:53:00 +01:00
Owen Mansel-Chan
8647f69720
Change string prefix check
...
This avoids putting all the prefixes in the string pool.
2024-07-16 15:56:28 +01:00
