Aditya Sharad
|
fe7660f396
|
Merge pull request #19085 from JarLob/nonpriv
Fix potentially privileged pull request medium query
|
2025-03-25 20:25:31 +05:30 |
|
Jaroslav Lobačevski
|
fe7d9eeb23
|
Update actions/ql/lib/change-notes/2025-03-20.md
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
|
2025-03-20 22:01:11 +01:00 |
|
Jaroslav Lobačevski
|
b85d4b590d
|
move the change note to the correct directory
|
2025-03-20 20:29:35 +00:00 |
|
Jaroslav Lobačevski
|
5f63fc2048
|
Fix potentially privileged pull request medium query
|
2025-03-20 20:23:07 +00:00 |
|
github-actions[bot]
|
51cdeefafb
|
Post-release preparation for codeql-cli-2.20.7
|
2025-03-17 13:00:41 +00:00 |
|
github-actions[bot]
|
2d64a618e6
|
Release preparation for version 2.20.7
|
2025-03-17 12:15:54 +00:00 |
|
github-actions[bot]
|
58f355ae5a
|
Post-release preparation for codeql-cli-2.20.6
|
2025-03-03 18:18:15 +00:00 |
|
github-actions[bot]
|
fa850cccb1
|
Release preparation for version 2.20.6
|
2025-03-03 17:13:19 +00:00 |
|
Dave Bartolomeo
|
2dde9ab6b9
|
Move immutable-actions-list pack to codeql org
|
2025-02-27 12:30:11 -05:00 |
|
Dave Bartolomeo
|
abc174858e
|
Remove octokit as trusted Actions owner
|
2025-02-27 12:15:40 -05:00 |
|
Dave Bartolomeo
|
86c5d9f1cd
|
Move list of immutable actions into internal model pack for now.
|
2025-02-27 11:48:27 -05:00 |
|
github-actions[bot]
|
ad24f94a77
|
Post-release preparation for codeql-cli-2.20.5
|
2025-02-17 17:58:24 +00:00 |
|
github-actions[bot]
|
6f4562f3bd
|
Release preparation for version 2.20.5
|
2025-02-17 16:55:54 +00:00 |
|
Dave Bartolomeo
|
0e4725bfe2
|
Merge pull request #18435 from felickz/felickz/actions-trusted-owner-data-extensions
Convert trusted actions list to data extension
|
2025-02-07 10:25:41 -05:00 |
|
Chad Bentz
|
fd404bcbcd
|
Update actions/ql/lib/change-notes/2025-01-07-trusted-owner-ext.md
Co-authored-by: Dave Bartolomeo <dbartol@github.com>
|
2025-02-06 14:28:07 -05:00 |
|
Asger F
|
1904b026b2
|
Actions: Avoid blowup in quotation parser
The parser has an inherent N^2 blowup and will need a rewrite eventually. For now I'm just trying to make it not blow up as often.
|
2025-02-05 13:35:52 +01:00 |
|
github-actions[bot]
|
f1b05a79a4
|
Post-release preparation for codeql-cli-2.20.4
|
2025-02-04 09:25:09 +00:00 |
|
github-actions[bot]
|
573e53e454
|
Release preparation for version 2.20.4
|
2025-02-03 15:19:35 +00:00 |
|
Asger F
|
16634e6dc9
|
Merge pull request #18540 from JarLob/bash
Actions: Improve bash support
|
2025-01-28 09:49:58 +01:00 |
|
Jaroslav Lobačevski
|
9521467a06
|
Update actions/ql/lib/codeql/actions/Bash.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2025-01-24 12:59:41 +01:00 |
|
Simon Friis Vindum
|
a6cd53eeb8
|
Merge pull request #18497 from paldepind/shared-basic-block-library
Add shared basic block library
|
2025-01-24 10:49:33 +01:00 |
|
Simon Friis Vindum
|
e13a7a224f
|
Merge branch 'main' into shared-basic-block-library
|
2025-01-24 09:54:26 +01:00 |
|
Jaroslav Lobačevski
|
329ed5223a
|
Update actions/ql/lib/change-notes/2025-01-22-version.md
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2025-01-23 10:25:58 +01:00 |
|
Jaroslav Lobačevski
|
e242190e04
|
Fix rlespinasse/github-slug-action upper bound
|
2025-01-22 22:22:21 +00:00 |
|
Jaroslav Lobačevski
|
ab20625b8f
|
Fix the upper bound of the range
|
2025-01-22 17:30:19 +01:00 |
|
Jaroslav Lobačevski
|
55df2b4302
|
Change notes
|
2025-01-22 17:30:19 +01:00 |
|
Jaroslav Lobačevski
|
83d13c6f20
|
Fix lower range for known vulnerable actions
|
2025-01-22 17:30:19 +01:00 |
|
Jaroslav Lobačevski
|
6d94168ad9
|
gh view
|
2025-01-21 17:15:41 +00:00 |
|
github-actions[bot]
|
fbb7f0a0c6
|
Post-release preparation for codeql-cli-2.20.2
|
2025-01-20 21:11:14 +00:00 |
|
github-actions[bot]
|
a0512a50f2
|
Release preparation for version 2.20.2
|
2025-01-20 21:11:12 +00:00 |
|
Jaroslav Lobačevski
|
88529d42d0
|
Remove comparison
|
2025-01-20 16:28:35 +00:00 |
|
Jaroslav Lobačevski
|
facceb6c2d
|
Change note
|
2025-01-20 15:08:12 +00:00 |
|
Jaroslav Lobačevski
|
da9d612a47
|
Improve bash support
|
2025-01-20 14:59:30 +00:00 |
|
Simon Friis Vindum
|
53b63bed00
|
Actions: Implement added predicates in CFG instantiation
|
2025-01-17 13:31:00 +01:00 |
|
Chad Bentz
|
1a4c2058a0
|
codeql query format
|
2025-01-09 19:39:06 -05:00 |
|
Chad Bentz
|
26074bb7fe
|
Make docs less verbose regarding codeql config + enhance changlog to highlight extensibility
|
2025-01-09 19:30:02 -05:00 |
|
Chad Bentz
|
b144c2f597
|
Merge branch 'github:main' into felickz/actions-trusted-owner-data-extensions
|
2025-01-09 15:07:49 -05:00 |
|
Chad Bentz
|
bccec0a711
|
Format
|
2025-01-07 17:25:40 -05:00 |
|
Chad Bentz
|
3e94a4c2bf
|
Refactor trusted actions owner model
- use existing data extensions config and yml folder
- rename from trustedActionsOwner to trustedActionsOwnerDataModel
- update related predicates
|
2025-01-07 17:22:24 -05:00 |
|
github-actions[bot]
|
fb20f6ca63
|
Post-release preparation for codeql-cli-2.20.1
|
2025-01-07 22:07:40 +00:00 |
|
Chad Bentz
|
35587ed3e7
|
Format lib
|
2025-01-07 17:02:37 -05:00 |
|
Chad Bentz
|
8f9aecd76f
|
Add change notes for expanding Trusted Action owner list using data extensions
|
2025-01-07 15:55:58 -05:00 |
|
github-actions[bot]
|
88b6f1e79a
|
Release preparation for version 2.20.1
|
2025-01-07 20:50:36 +00:00 |
|
Chad Bentz
|
22e7b9a825
|
Convert trusted actions list to data extension
|
2025-01-07 15:35:12 -05:00 |
|
Dave Bartolomeo
|
72a53c4b23
|
Revert "Release preparation for version 2.20.1"
|
2025-01-07 13:32:23 -05:00 |
|
github-actions[bot]
|
fbf9f2fff8
|
Release preparation for version 2.20.1
|
2025-01-07 17:20:13 +00:00 |
|
Dave Bartolomeo
|
22e030584c
|
Revert "Release preparation for version 2.20.1"
|
2025-01-07 12:14:27 -05:00 |
|
github-actions[bot]
|
a121c5a5d0
|
Release preparation for version 2.20.1
|
2025-01-06 18:20:22 +00:00 |
|
Dave Bartolomeo
|
e4bce701a0
|
Add change notes
|
2024-12-19 10:53:23 -05:00 |
|
Dave Bartolomeo
|
4743dfa601
|
Fix result of getAPrimaryQlClass()
|
2024-12-18 16:22:37 -05:00 |
|