29 Commits

Author	SHA1	Message	Date
yoff	80ae8794f5	actions: update test expectations	2025-04-01 17:07:57 +02:00
yoff	bd7c684c6c	actions: add test with empty permissions	2025-04-01 17:06:32 +02:00
yoff	e7bb47f335	ruby: add MaD model for permissions needed by actions ... Use this to suggest minimal set of nedded permissions	2025-03-31 16:48:37 +02:00
Jaroslav Lobačevski	5f63fc2048	Fix potentially privileged pull request medium query	2025-03-20 20:23:07 +00:00
Andrew Eisenberg	2a0e133768	Move UnversionedImmutableAction.ql to experimental ... This query will give too many false positives for users until immutable actions is released.	2025-03-06 15:08:02 -08:00
Dave Bartolomeo	2dde9ab6b9	Move immutable-actions-list pack to codeql org	2025-02-27 12:30:11 -05:00
Dave Bartolomeo	86c5d9f1cd	Move list of immutable actions into internal model pack for now.	2025-02-27 11:48:27 -05:00
martincostello	31913c4a55	Fix test ... Fix failing test.	2025-02-14 19:46:46 +00:00
Martin Costello	9a29cebe58	Fix docker SHA false positive ... Fix false positives for pinned Docker container images.	2025-02-14 12:35:55 +00:00
Dave Bartolomeo	42562b5187	Merge pull request #18704 from github/dbartol/actions-suites ... Actions: Move experimental queries to `experimental` directory	2025-02-07 10:03:31 -05:00
Dave Bartolomeo	e2ab65ea3e	Update qlref paths	2025-02-06 11:20:19 -05:00
Asger F	4ec84e9327	Actions: update expected output	2025-02-05 13:36:38 +01:00
Asger F	e6b5040909	Actions: add test with many quoted strings	2025-02-05 13:35:50 +01:00
Asger F	16634e6dc9	Merge pull request #18540 from JarLob/bash ... Actions: Improve bash support	2025-01-28 09:49:58 +01:00
Jaroslav Lobačevski	ab20625b8f	Fix the upper bound of the range	2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski	83d13c6f20	Fix lower range for known vulnerable actions	2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski	6d94168ad9	gh view	2025-01-21 17:15:41 +00:00
Jaroslav Lobačevski	88529d42d0	Remove comparison	2025-01-20 16:28:35 +00:00
Jaroslav Lobačevski	da9d612a47	Improve bash support	2025-01-20 14:59:30 +00:00
Óscar San José	b39bfdbb04	Upgrade workflows to ubuntu-24	2025-01-17 11:22:15 +01:00
Dave Bartolomeo	8b132274b5	Revert "Accept DB consistency check for now" ... This reverts commit dba6f0bb9f.	2024-12-19 09:47:42 -05:00
Dave Bartolomeo	dba6f0bb9f	Accept DB consistency check for now ... Failure tracked in https://github.com/github/codeql-team/issues/3655	2024-12-18 16:54:34 -05:00
Dave Bartolomeo	d66cb7e8c7	Fix formatting	2024-12-18 15:48:34 -05:00
Dave Bartolomeo	47e364a13b	Remove placeholder code	2024-12-18 14:51:24 -05:00
Dave Bartolomeo	c7efe5d0f5	Update lock files	2024-12-18 14:42:13 -05:00
Dave Bartolomeo	dbc1fa6450	Merge Actions queries from github/codeql-actions	2024-12-18 14:39:43 -05:00
Dave Bartolomeo	ee7680df84	Move into actions subdirectory to prepare for migration to github/codeql	2024-12-18 14:35:15 -05:00
Dave Bartolomeo	3c9e19346c	Update test expectations	2024-10-29 16:53:36 -04:00
Dave Bartolomeo	dffc9e2e31	Create placeholder Actions QL packs	2024-10-25 17:45:05 -04:00