Edward Minnix III
8d88af1af0
Apply docs review suggestions
...
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com >
2023-08-17 13:05:38 -04:00
Ed Minnix
4eb1035dfe
Documentation fixes
2023-08-17 13:05:38 -04:00
Ed Minnix
b305962c9a
Use more appropriate description
2023-08-17 13:05:37 -04:00
Edward Minnix III
929090a847
Typos and style fixes
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-08-17 13:05:37 -04:00
Ed Minnix
52ebf9fff6
Java: Add trust boundary change note
2023-08-17 13:05:37 -04:00
Ed Minnix
172b8a6967
Documentation fixes
2023-08-17 13:05:37 -04:00
Ed Minnix
b567ec875a
Documentation
2023-08-17 13:05:37 -04:00
Ed Minnix
f58590c6a9
Trust Boundary Work
2023-08-17 13:05:37 -04:00
Ed Minnix
3e7444cd66
Style fixes
2023-08-17 13:05:36 -04:00
Ed Minnix
15370506b8
Add missing security severity
2023-08-17 13:05:36 -04:00
Ed Minnix
a8b7e70d01
Convert trust boundary models to MaD
2023-08-17 13:05:36 -04:00
Ed Minnix
76438f13b6
Trust Boundary Query
2023-08-17 13:05:36 -04:00
Anders Starcke Henriksen
56871c77f5
Merge branch 'main' into starcke/automodel-pack
2023-08-17 10:04:44 +02:00
Stephan Brandauer
44a9cf93e0
Merge branch 'main' into kaeluka/add-provenance-to-metadata
2023-08-16 09:31:03 +02:00
Stephan Brandauer
808dc3e8d3
Java: Automodel framework mode: track exact ai- provenance in alreadyAiModeled meta data property
2023-08-16 09:25:03 +02:00
Stephan Brandauer
20254c3d0a
Merge pull request #13886 from github/kaeluka/java-automodel-variadic-args
...
Java: automodel application mode: use endpoint class like in framework mode
2023-08-16 08:49:01 +02:00
Stephan Brandauer
bc55afcee7
Java: Automodel framework mode: use new interface
2023-08-14 13:17:55 +02:00
Stephan Brandauer
551b34e3be
Java: Automodel application mode: include candidates that are useful for regression testing
2023-08-14 11:46:40 +02:00
Stephan Brandauer
1a95a34441
Java: automodel: use the call for call context, rather than the argument
2023-08-14 09:54:44 +02:00
Stephan Brandauer
4107758c8a
Java: automodel extraction: add strings to query selection
2023-08-14 09:49:50 +02:00
Henry Mercer
1213eba630
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
2023-08-11 13:54:55 +01:00
Stephan Brandauer
a9906f6f7b
Java: fix - add extra $@
...
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com >
2023-08-11 09:15:09 +02:00
github-actions[bot]
432c21d4fb
Post-release preparation for codeql-cli-2.14.2
2023-08-09 18:45:18 +00:00
Stephan Brandauer
e927470961
Merge branch 'main' into kaeluka/java-automodel-variadic-args
2023-08-09 09:02:32 +02:00
Anders Schack-Mulligen
0ca3f3308b
Merge pull request #13478 from aschackmull/java/varcapture
...
Java: Add proper support for variable capture flow.
2023-08-08 16:22:56 +02:00
Anders Starcke Henriksen
3918e57ffe
Take filter pack into account.
2023-08-08 15:10:12 +02:00
Anders Starcke Henriksen
8d34ab6d18
Merge branch 'main' into starcke/automodel-pack
2023-08-08 15:02:33 +02:00
Anders Starcke Henriksen
7da6da1c93
Merge pull request #13852 from github/starcke/automodel-package-filter
...
Add option to filter automodel queries
2023-08-08 14:59:00 +02:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
Stephan Brandauer
3433437034
Java: automodel application mode: only extract the first argument corresponding to a varargs array
2023-08-07 14:15:17 +02:00
Stephan Brandauer
e1a5eba61b
Java: automodel application mode: refactor varargs endpoint class to rely on normal argument node for nicer extracted examples
2023-08-07 12:18:52 +02:00
Stephan Brandauer
650ff8db87
Java: automodel comments
2023-08-07 12:18:51 +02:00
Stephan Brandauer
0781cb78e8
Java: automodel application mode: add isVarargsArray metadata value
2023-08-07 12:18:51 +02:00
Stephan Brandauer
5abf7769a7
Java: automodel application mode: use endpoint class like in framework mode
2023-08-07 12:18:51 +02:00
Tony Torralba
586c8803c5
Move the sources back the .ql files
...
Otherwise they would both apply at the same time, making both versions of the query identical.
2023-08-04 10:02:56 +02:00
Tony Torralba
e9bad321b6
Apply suggestions from code review
2023-08-04 09:21:45 +02:00
Paul Hodgkinson
fba37aa7c9
Merge branch 'main' into java/experimental/command-injection
2023-08-03 14:12:38 +01:00
aegilops
fc7f8409be
Fix up for code review
2023-08-03 13:50:40 +01:00
Anders Starcke Henriksen
e2abd3ff13
Create separate automodel pack.
2023-08-03 13:55:15 +02:00
Anders Schack-Mulligen
9a4de208ef
Java: Fix qltests.
2023-08-03 10:04:05 +02:00
Anders Starcke Henriksen
131ae1aae9
Fix name in predicate.
2023-08-03 09:53:40 +02:00
Anders Starcke Henriksen
1c425a5602
Change from package to endpoint.
2023-08-03 09:50:23 +02:00
Anders Starcke Henriksen
9b8d7df370
Add option to filter automodel queries by package.
2023-08-03 09:50:23 +02:00
Anders Schack-Mulligen
7bc8bf616f
Merge pull request #13863 from aschackmull/dataflow/pack4
...
Dataflow: Move the shared library to a properly shared qlpack.
2023-08-02 14:19:49 +02:00
Stephan Brandauer
cb55b10edc
Merge pull request #13788 from github/kaeluka/automodel-telemetry-testing
...
Java: Tests for Automodel Extraction Queries
2023-08-01 15:30:26 +02:00
Anders Schack-Mulligen
405a3a73d1
Java: Remove irrelevant import.
2023-08-01 14:31:30 +02:00
Tony Torralba
b5d08ade59
Formatting
2023-08-01 09:35:25 +02:00
Anders Schack-Mulligen
e73e312e10
Java: Add change note.
2023-08-01 09:28:56 +02:00
Stephan Brandauer
621c05dc4b
Java: format
2023-08-01 09:19:03 +02:00
Stephan Brandauer
058236877e
Java: Drive-by: fix oversight in #13823
...
In PR #13823 , we had rewritten the endpoints that are being considered for framework mode. We used to use `DataFlow::ParameterNode` as endpoints.
However, `ParameterNode`s do not exist for the implicit `this` parameter; they also do not exist for bodiless interface-methods.
In PR #13823 , we forgot to model that `this` only exists for non-static methods and to only consider parameters that we have source code for.
2023-08-01 09:18:58 +02:00
