Commit Graph

78658 Commits

Author SHA1 Message Date
Tamas Vajk
34e8318797 Rename the CCR query suite to code-quality 2025-03-27 08:36:53 +01:00
Paolo Tranquilli
d4b2ec09b6 Merge branch 'main' into redsun82/rust-analyzer-update 2025-03-26 17:30:52 +01:00
Geoffrey White
c84e2cd7cb Rust: Reduce the workaround (fixes duplicate results). 2025-03-26 15:40:45 +00:00
Geoffrey White
0a04191a61 Rust: Effect of merging main (duplicate results). 2025-03-26 15:06:03 +00:00
Geoffrey White
56f330d545 Merge branch 'main' into deallocation 2025-03-26 14:58:32 +00:00
Marco Gario
288fcb6092 Update CWE-829 description for clarity 2025-03-26 15:53:20 +01:00
idrissrio
9d2e0c5f21 Merge branch 'main' into idrissrio/preprocessor-multiline 2025-03-26 15:08:34 +01:00
idrissrio
9af65001b3 C++: accept changes after C++ extractor preprocessor fix 2025-03-26 15:08:04 +01:00
Michael Nebel
8bda7ce6be C#: Update model generator expected test output. 2025-03-26 15:07:44 +01:00
Michael Nebel
8763d18c91 C#: Correct printing of out and ref notes in the model generator. 2025-03-26 15:06:26 +01:00
Michael Nebel
bcefdc8893 C#: Add model generator test cases with in/out parameters. 2025-03-26 15:06:13 +01:00
Tom Hvitved
023ffe22a0 C#: Make getPreUpdateNode Unique Again 2025-03-26 14:42:00 +01:00
Napalys
bf9a21fce2 Added change note 2025-03-26 14:27:13 +01:00
Napalys
200bf391ce Enhance NodeJSLib data flow handling through await. 2025-03-26 14:24:52 +01:00
Napalys
762ca2f8f5 Added test case with async readFile, currently not flagged. 2025-03-26 14:21:44 +01:00
Tamas Vajk
4e37e5add5 Add change note 2025-03-26 13:50:39 +01:00
Marco Gario
b1737858fa UntrustedCheckout: Try and differentiate between two versions of the rule 2025-03-26 12:49:48 +00:00
Arthur Baars
bf76505880 Rust: address comments 2025-03-26 13:28:44 +01:00
Marco Gario
29a23a3d20 Update UseOfKnownVulnerableAction.ql
Name should not end in a `.`
2025-03-26 13:28:34 +01:00
Erik Krogh Kristensen
a0c3176dd6 Merge branch 'main' into lcartey/support-sap-json-formats 2025-03-26 12:15:54 +01:00
Owen Mansel-Chan
c8a1ad6b28 Merge pull request #19120 from github/workflow/coverage/update
Update CSV framework coverage reports
2025-03-26 10:58:19 +00:00
Napalys
a78e0e914f Added change note. 2025-03-26 11:45:25 +01:00
Tamas Vajk
68f96d39d2 Make working directory name the same on all OS 2025-03-26 11:42:59 +01:00
Napalys
ae645e49ba Added support for @hapi/hapi server. 2025-03-26 11:41:11 +01:00
Napalys
649b4e07e2 Added test cases for @hapi/hapi 2025-03-26 11:35:58 +01:00
Tom Hvitved
284df7fcf3 Rust: Also resolve crate paths in non-source files 2025-03-26 11:29:34 +01:00
Tamas Vajk
f6968af3ae Add expected XSS test results 2025-03-26 11:03:32 +01:00
Owen Mansel-Chan
73348f2fd9 Merge branch 'main' into workflow/coverage/update 2025-03-26 09:59:26 +00:00
Joe Farebrother
d23c3b8a74 Revert manual magic
This appeared to cause timeouts on DCA.
2025-03-26 09:23:49 +00:00
Óscar San José
df721f8d1a Merge pull request #19119 from github/oscarsj/deprecate-ubuntu-20
Replace occurences of ubuntu-20 by ubuntu-22 in .github/workflows
2025-03-26 09:42:20 +01:00
idrissrio
6c8cfc666a Merge branch 'main' into idrissrio/preprocessor-multiline 2025-03-26 09:41:40 +01:00
idrissrio
148ffe8519 C++: accept changes after C++ extractor preprocessor fix 2025-03-26 09:41:20 +01:00
Napalys
62ab7f50d6 Added change note. 2025-03-26 09:33:59 +01:00
Tamás Vajk
b21968c495 Merge pull request #18947 from tamasvajk/tamasvajk/java_empty_method
Java: Add new quality query to detect empty methods
2025-03-26 09:33:47 +01:00
Paolo Tranquilli
2a81cc9567 Merge branch 'main' into redsun82/rust-analyzer-update 2025-03-26 09:33:38 +01:00
Tom Hvitved
212884cd9d Merge pull request #19106 from hvitved/rust/reverse-post-update-steps
Rust: Add reverse post-update flow steps
2025-03-26 09:30:26 +01:00
Erik Krogh Kristensen
14989f1cc6 Merge branch 'main' into lcartey/support-sap-json-formats 2025-03-26 09:07:21 +01:00
Tom Hvitved
f45eca77fa Address review comments 2025-03-26 09:03:22 +01:00
Tom Hvitved
72028c034e Rust: Add reverse post-update flow steps 2025-03-26 09:03:18 +01:00
Tom Hvitved
fcb1d9433a Rust: Add more data flow tests 2025-03-26 09:02:23 +01:00
Tom Hvitved
278d251dc1 Merge pull request #19107 from hvitved/rust/mad-argument-source
Rust: Support `Argument[x]` MaD source definitions
2025-03-26 09:02:06 +01:00
Tom Hvitved
b4926475d3 Address review comment 2025-03-26 08:44:03 +01:00
github-actions[bot]
abbd720704 Add changed framework coverage reports 2025-03-26 00:22:12 +00:00
Óscar San José
b6a0a5c6bf Replace occurences of ubuntu-20 by ubuntu-22 in .github/workflows 2025-03-25 18:59:16 +01:00
Geoffrey White
3ad4de400f Merge pull request #19067 from geoffw0/convtest
Rust: Add a couple of test cases for data flow through conversions
2025-03-25 17:44:29 +00:00
Napalys
4cdc40d115 Added SQL injection detection for exec method embeded Express client from hdbext. 2025-03-25 18:39:54 +01:00
Paolo Tranquilli
7cfed3c4a7 Merge branch 'main' into redsun82/rust-analyzer-update 2025-03-25 18:29:39 +01:00
Luke Cartey
8814077c76 Add support for additional SAP JSON formats. 2025-03-25 17:01:37 +00:00
Paolo Tranquilli
9dc9f79172 Merge pull request #19110 from github/redsun82/rust-fix-rc.17
Rust: accept test changes for now
2025-03-25 17:54:47 +01:00
Tamás Vajk
36ed96f8e6 Merge pull request #19070 from tamasvajk/update-complog
C#: Update CompLog dependency to 0.9.8
2025-03-25 16:11:01 +01:00