Andrew Eisenberg
02051ff7b1
Update the security experimental suite
2025-03-12 11:46:03 -07:00
Andrew Eisenberg
cd63e7cf54
Fix the actions-security-and-quality.qls suite
...
It was not using the proper selectors. It is now the same as
other quality suites in other languages.
2025-03-12 11:43:59 -07:00
Arthur Baars
b2e0eaf664
Merge pull request #18965 from JarLob/docs
...
Minor example workflow fix
2025-03-12 11:17:42 +01:00
Remco Vermeulen
8f603251d7
Add missing dependency
...
The query pack has suites that rely on the `codeql/suite-helpers` pack, but doesn't include it as a dependency.
This will cause error when resolving suites referring the Actions query pack.
2025-03-10 18:31:01 -07:00
Jaroslav Lobačevski
fa35d6c3ac
Minor example workflow fix
2025-03-10 20:43:16 +00:00
Andrew Eisenberg
2a0e133768
Move UnversionedImmutableAction.ql to experimental
...
This query will give too many false positives for users until
immutable actions is released.
2025-03-06 15:08:02 -08:00
Dave Bartolomeo
4e47da463e
Add change note
2025-02-27 12:04:09 -05:00
github-actions[bot]
ad24f94a77
Post-release preparation for codeql-cli-2.20.5
2025-02-17 17:58:24 +00:00
github-actions[bot]
6f4562f3bd
Release preparation for version 2.20.5
2025-02-17 16:55:54 +00:00
martincostello
f1723321fa
Format Document
...
Fix lint warning.
2025-02-14 18:06:00 +00:00
Martin Costello
979d604bf6
Apply suggestions from code review
...
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com >
2025-02-14 17:21:24 +00:00
martincostello
5d2409e652
Fix query
...
Forgot to move the `and`.
2025-02-14 13:36:09 +00:00
martincostello
9a7ed7f3f7
Re-order conditions
...
Makes for a neater diff.
2025-02-14 13:35:20 +00:00
martincostello
99bb0f0b4f
Use if then else
...
Apply code review suggestion.
Co-Authored-By: Taus <1104778+tausbn@users.noreply.github.com >
2025-02-14 13:30:55 +00:00
martincostello
cf8abb7989
Add change note
...
Add change note.
2025-02-14 13:27:36 +00:00
martincostello
71bc89beda
Fix query
...
Fix various issues with the query.
2025-02-14 12:59:02 +00:00
Martin Costello
9a29cebe58
Fix docker SHA false positive
...
Fix false positives for pinned Docker container images.
2025-02-14 12:35:55 +00:00
Dave Bartolomeo
0b2e307f9a
Merge pull request #18705 from github/dbartol/actions-suite-selectors
...
Use default query selectors for Actions suites
2025-02-07 14:06:00 -05:00
Dave Bartolomeo
0e4725bfe2
Merge pull request #18435 from felickz/felickz/actions-trusted-owner-data-extensions
...
Convert trusted actions list to data extension
2025-02-07 10:25:41 -05:00
Dave Bartolomeo
3b02f4d7bc
Update change note
2025-02-07 10:09:31 -05:00
Dave Bartolomeo
42562b5187
Merge pull request #18704 from github/dbartol/actions-suites
...
Actions: Move experimental queries to `experimental` directory
2025-02-07 10:03:31 -05:00
Dave Bartolomeo
ca7bcc9714
Add change note
2025-02-06 11:50:59 -05:00
Dave Bartolomeo
cb7aeea516
Use standard query selectors for actions-code-scanning and actions-security-extended
2025-02-06 11:34:43 -05:00
Dave Bartolomeo
74619d49b3
Update precision and severity for unpinned-tag
...
This ensures that it will be in `security-extended`, but not the default suite.
2025-02-06 11:33:17 -05:00
Dave Bartolomeo
81ff4dd81c
Update severity for excessive-secrets-exposure
...
This ensures that it will remain in the default suite.
2025-02-06 11:32:32 -05:00
Dave Bartolomeo
d7259c17db
Add security tag for missing-actions-permissions
...
This ensures that it will remain in the default suite.
2025-02-06 11:31:36 -05:00
Dave Bartolomeo
909de5280c
Update severity and precision of a few injection queries
...
These will wind up in `security-extended`, when previously they were not in any of the standard suites.
2025-02-06 11:30:43 -05:00
Dave Bartolomeo
604dbfd0d0
Actions: Move experimental to experimental directory
...
This is consistent with how other languages manage experimental queries. I've left the `experimental` tags in place.
2025-02-06 10:54:25 -05:00
Remco Vermeulen
9894e9ef9f
Add CCR suites
2025-02-05 01:58:34 +00:00
github-actions[bot]
f1b05a79a4
Post-release preparation for codeql-cli-2.20.4
2025-02-04 09:25:09 +00:00
github-actions[bot]
573e53e454
Release preparation for version 2.20.4
2025-02-03 15:19:35 +00:00
github-actions[bot]
fbb7f0a0c6
Post-release preparation for codeql-cli-2.20.2
2025-01-20 21:11:14 +00:00
github-actions[bot]
a0512a50f2
Release preparation for version 2.20.2
2025-01-20 21:11:12 +00:00
docs-bot
8b5bed1a46
Add actions-security-experimental.qls
2025-01-17 09:47:44 -05:00
Chad Bentz
f413c4f467
Remove codeql config references from query doc
2025-01-09 19:32:06 -05:00
Chad Bentz
26074bb7fe
Make docs less verbose regarding codeql config + enhance changlog to highlight extensibility
2025-01-09 19:30:02 -05:00
Chad Bentz
b144c2f597
Merge branch 'github:main' into felickz/actions-trusted-owner-data-extensions
2025-01-09 15:07:49 -05:00
Chad Bentz
6b3098d26c
Add configuration instructions for trusted Action publishers using data extensions
2025-01-07 19:26:18 -05:00
Chad Bentz
3e94a4c2bf
Refactor trusted actions owner model
...
- use existing data extensions config and yml folder
- rename from trustedActionsOwner to trustedActionsOwnerDataModel
- update related predicates
2025-01-07 17:22:24 -05:00
github-actions[bot]
fb20f6ca63
Post-release preparation for codeql-cli-2.20.1
2025-01-07 22:07:40 +00:00
Chad Bentz
e4cfd97069
Format
2025-01-07 17:01:33 -05:00
github-actions[bot]
88b6f1e79a
Release preparation for version 2.20.1
2025-01-07 20:50:36 +00:00
Chad Bentz
22e7b9a825
Convert trusted actions list to data extension
2025-01-07 15:35:12 -05:00
Dave Bartolomeo
72a53c4b23
Revert "Release preparation for version 2.20.1"
2025-01-07 13:32:23 -05:00
github-actions[bot]
fbf9f2fff8
Release preparation for version 2.20.1
2025-01-07 17:20:13 +00:00
Dave Bartolomeo
22e030584c
Revert "Release preparation for version 2.20.1"
2025-01-07 12:14:27 -05:00
github-actions[bot]
a121c5a5d0
Release preparation for version 2.20.1
2025-01-06 18:20:22 +00:00
Dave Bartolomeo
90efbf5172
Update suites for Actions queries
2024-12-20 14:37:46 -05:00
Dave Bartolomeo
e9a04b8839
Mark UnversionedImmutableAction query as internal
2024-12-20 14:37:32 -05:00
Kylie Stradley
690924f72b
Update actions/ql/src/Security/CWE-829/UnversionedImmutableAction.md
...
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com >
2024-12-20 12:04:42 -05:00
