Napalys
66737402c2
Updated test ouput with fixes from main.
2025-03-14 10:50:10 +01:00
Napalys Klicius
908f48a22f
Merge branch 'main' into js/vue_tanstack_model
2025-03-14 10:45:42 +01:00
Asger F
9a8cb1a55b
Merge pull request #19007 from asgerf/js/api-graph-awaited-return
...
JS: Fix bug in API graphs getPromised() missing async function returns
2025-03-14 10:36:16 +01:00
Simon Friis Vindum
4dbfda59cf
Merge branch 'main' into rust-data-flow-split
2025-03-14 09:58:46 +01:00
Tom Hvitved
cf0b3b5727
Merge pull request #18632 from hvitved/rust/type-inference
...
Rust: Implement basic type inference in QL
2025-03-14 09:43:04 +01:00
Michael Nebel
a3ef137a8e
Merge pull request #19014 from michaelnebel/csharp/ccr-useless-gethashcode-all
...
C#: Add `cs/useless-gethashcode-call` to the CCR suite.
2025-03-14 08:45:31 +01:00
Michael Nebel
563ffb8c27
Merge pull request #19010 from michaelnebel/csharp/useless-gethashcode-call
...
C#: Increase precision of `cs/useless-gethashcode-call`.
2025-03-14 08:44:38 +01:00
Jeroen Ketema
de2fb037d0
Merge pull request #18980 from LeStarch/jpl-c-basic-integral-types-fix
...
Fixing BasicIntTypes to allow C Standard Integers and 'bool'
2025-03-14 08:06:55 +01:00
Aditya Sharad
956b5bf6d6
Actions: Fix typos in query names for env var injection
...
This will reflect in the UI titles of existing and new alerts
once shipped but should not churn any existing alerts.
2025-03-13 17:02:04 -07:00
M Starch
7b5d604607
Updating tests to allow new typedefs
2025-03-13 15:04:37 -07:00
Aditya Sharad
c534f89e93
Code scanning config: Exclude actions test directory
...
These are test cases for the GitHub Actions analysis.
Exclude them when running code scanning against this repo,
to avoid noisy alerts.
Test workflow files in this directory are safe from
execution, because Actions only executes workflows
that live directly in the .github/workflows
top-level directory.
`action.yml` files in this directory can in theory
be executed as a step in a workflow; for now exclude them.
2025-03-13 13:30:54 -07:00
Tom Hvitved
c3739d4f23
Address review comments
2025-03-13 21:10:48 +01:00
Óscar San José
fba7bcd127
Merge pull request #19021 from github/oscarsj-patch-2
...
Add paths to codeql-config.yml to avoid codeql analysis errors
2025-03-13 20:26:14 +01:00
M Starch
7f4905987e
Addressing review comments
...
Reduced the category to minorAnalysis. Handled bools via a instanceof with BoolType. Formatted the query correctly.
2025-03-13 11:12:35 -07:00
Jon Janego
de5d3b6263
Update query-metadata-style-guide.md
2025-03-13 12:42:51 -05:00
Óscar San José
66a496fa82
Add paths to codeql-config.yml to avoid codeql analysis errors
2025-03-13 18:27:25 +01:00
Paolo Tranquilli
45db4ae7c6
Merge pull request #19018 from github/redsun82/rust-ql-test-log-fix
...
Rust: fix `qltest.sh` for some versions of macOS
2025-03-13 18:07:50 +01:00
Jon Janego
6c28be9827
Update query-metadata-style-guide.md
...
initial commit of changes starting to add quality tagging standards
2025-03-13 11:49:48 -05:00
Mathias Vorreiter Pedersen
d23c8fd662
Merge pull request #19001 from MathiasVP/add-uncertain-api-for-dataflow
...
C++: Refine `Node.asDefinition`
2025-03-13 09:35:53 -07:00
Simon Friis Vindum
fb718660d9
Rust: Generate more sinks and update query description
2025-03-13 17:35:32 +01:00
Mathias Vorreiter Pedersen
6f4e9ed136
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2025-03-13 16:00:36 +00:00
Mathias Vorreiter Pedersen
0e5fa1b5eb
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2025-03-13 16:00:23 +00:00
Mathias Vorreiter Pedersen
470321e8b6
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2025-03-13 16:00:15 +00:00
Mathias Vorreiter Pedersen
9cde2bb94d
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2025-03-13 15:59:57 +00:00
Mathias Vorreiter Pedersen
68b414d169
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2025-03-13 15:59:48 +00:00
Napalys Klicius
28d1152250
Merge pull request #19009 from Napalys/js/unescape
...
JS: Add support for `unescape`
2025-03-13 16:59:01 +01:00
Paolo Tranquilli
8cc39af190
Rust: fix qltest.sh for some versions of macOS
...
Turns out some version of macOS do not support the way `mktemp` was
being used. In any case it wasn't really necessary, see
https://github.com/github/codeql/pull/18918#discussion_r1979444850
(which I forgot to follow up on at the time after approval).
2025-03-13 16:54:27 +01:00
Taus
3d643c02be
Merge pull request #18921 from github/tausbn/python-fix-unused-global-variable-in-forward-annotation-fp
...
Python: Add support for forward references in unused var query
2025-03-13 16:37:25 +01:00
Owen Mansel-Chan
6ca9a1ff9a
Add change note
2025-03-13 15:05:32 +00:00
Owen Mansel-Chan
a8e993c942
Fix FP for always-locked fields
2025-03-13 15:03:32 +00:00
Owen Mansel-Chan
dc2cbf7402
Add tests for always-locked fields
2025-03-13 15:02:26 +00:00
Tom Hvitved
255f06b65a
Rust: Update expected test output
2025-03-13 15:51:33 +01:00
Michael Nebel
e2699586db
C#: Add cs/useless-gethashcode-call to the CCR suite.
2025-03-13 15:42:28 +01:00
Mathias Vorreiter Pedersen
0fe77154e1
C++: Add library change note.
2025-03-13 14:29:34 +00:00
Tom Hvitved
3bb89ea863
Rust: Move type inference/path resolution out of elements folder
2025-03-13 15:05:00 +01:00
Tom Hvitved
af91152f5c
Address review comments
2025-03-13 15:04:59 +01:00
Simon Friis Vindum
1ae28c7907
Merge branch 'main' into rust-cleartext-transmission
2025-03-13 15:01:11 +01:00
Paolo Tranquilli
179021ea69
Upgrade rules_rust to 0.58.0
2025-03-13 14:47:34 +01:00
Michael Nebel
4681f28f92
Merge pull request #19005 from michaelnebel/csharp/local-not-disposed
...
C#: Revisit `cs/local-not-disposed` tests.
2025-03-13 14:04:48 +01:00
Owen Mansel-Chan
aed51644ba
Convert to inline expectations test
2025-03-13 12:55:02 +00:00
Napalys
0df2069575
Added change note.
2025-03-13 13:47:46 +01:00
Napalys
de5c7efd63
Added test case for unescape.
2025-03-13 13:47:42 +01:00
Michael Nebel
dff66c7b28
C#: Add change-note.
2025-03-13 13:42:58 +01:00
Michael Nebel
36a524929f
C#: Update tests and test expected output.
2025-03-13 13:38:13 +01:00
Tom Hvitved
78280af570
Rust: Use 'infer' instead of 'resolve' in type inference library
2025-03-13 13:34:43 +01:00
Michael Nebel
4b02198652
C#: Only consider calling GetHashCode on byte, sbyte, short, ushort and int as useless.
2025-03-13 13:32:22 +01:00
Michael Nebel
a6ec8b6a25
C#: Convert tests cs/useless-gethashcode-call to inline tests.
2025-03-13 13:31:20 +01:00
Tom Hvitved
2394f2fab8
Rust: Fix bug in path resolution library
2025-03-13 13:23:18 +01:00
Tom Hvitved
795ba25895
Rust: Add more consistency checks
2025-03-13 13:23:16 +01:00
Tom Hvitved
fcdffc4e73
Rust: Use type inference in path resolution test
2025-03-13 13:23:14 +01:00