Owen Mansel-Chan
6a1bb9bfb0
Merge branch 'main' into main
2024-03-04 13:42:53 +00:00
Owen Mansel-Chan
0bf0c069c6
Fix formatting
2024-03-04 13:39:44 +00:00
Owen Mansel-Chan
910725939f
Update QLDoc
2024-03-04 13:06:23 +00:00
Michael B. Gale
a8ae2e2525
Go: Add changenote for autobuilder refactor
2024-03-04 12:02:51 +00:00
Michael B. Gale
0c93641b54
Merge pull request #15361 from github/mbg/go/legacy-gopath-mode-deprecated
...
Go: Update autobuilder to deal with the upcoming deprecation of the legacy GOPATH mode
2024-03-04 10:23:37 +00:00
Merdan Aziz
72e6853792
address the review comments
2024-03-03 20:36:43 +08:00
Malayke
7072ab9364
Update go/ql/src/experimental/CWE-770/DenialOfServiceGood.go
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-03-03 18:09:33 +08:00
Chris Smowton
9f84653283
Merge pull request #15613 from smowton/smowton/fix/golang-map-range-read-dataflow
...
Golang: fix flow from a map value via a range statement
2024-02-27 15:42:43 +00:00
Chris Smowton
a6480a4ca1
Autoformat again / tabify
2024-02-27 13:55:26 +00:00
Chris Smowton
74448c092a
Autoformat / uglify
2024-02-27 13:49:12 +00:00
Chris Smowton
e62a0805db
Add test for map literal
2024-02-27 13:44:52 +00:00
Chris Smowton
12213a0a08
Add test
2024-02-23 18:39:16 +00:00
Chris Smowton
d57160db5c
Direct map stores via a post-update node
2024-02-23 16:37:26 +00:00
Tom Hvitved
62b16c0fa3
Share getFileBySourceArchiveName implementation
2024-02-23 11:25:49 +01:00
github-actions[bot]
37f8fa3413
Post-release preparation for codeql-cli-2.16.3
2024-02-20 16:50:47 +00:00
github-actions[bot]
6d061fbc35
Release preparation for version 2.16.3
2024-02-20 14:26:23 +00:00
Michael B. Gale
ea676469bb
Merge pull request #15202 from github/mbg/go/1.22
...
Go: Update workflows and expected test results for Go 1.22
2024-02-20 12:32:57 +00:00
Tony Torralba
1704bfe2bf
Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification
...
Go: Promote `go/missing-jwt-signature-check` from experimental
2024-02-19 15:35:44 +01:00
Tony Torralba
8b8cebd599
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2024-02-19 08:59:03 +01:00
Michael B. Gale
25f0692e2c
Go: Update expected results for TypeParamType
2024-02-16 17:33:30 +00:00
Michael B. Gale
a9d8643f5a
Go: check for extracted files in go-files-found-not-processed test
2024-02-14 19:12:34 +00:00
Michael B. Gale
a26d11bcea
Go: Revert expected diagnostics for go-files-found-not-processed
2024-02-14 19:12:34 +00:00
Michael B. Gale
20836c7088
Go: Add test for multiple modules, where one cannot be extracted
2024-02-14 19:12:31 +00:00
Michael B. Gale
46c553e802
Go: Add test case for go.mod file without a Go version
2024-02-14 19:12:30 +00:00
Michael B. Gale
db1d24a900
Go: Update expected diagnostics for go-files-not-processed
2024-02-14 19:12:29 +00:00
Michael B. Gale
ec902827f6
Go: Initialise go.mod for stray source files
2024-02-14 19:12:29 +00:00
Michael B. Gale
aa5e14f59f
Go: Replace BuildInfo with GoWorkspace
2024-02-14 19:12:28 +00:00
Michael B. Gale
f013d9d373
Go: Use new workspace/module discovery
2024-02-14 19:12:26 +00:00
Michael B. Gale
bd36847ca2
Go: Emit relative path import diagnostic if prompted by go mod tidy
...
The corresponding integration test now successfully extracts the project
2024-02-14 19:12:25 +00:00
Tony Torralba
582f341d9e
Add references to qhelp
2024-02-14 17:25:09 +01:00
Tony Torralba
f9638760ff
Fix MaD rows
2024-02-14 17:25:08 +01:00
Tony Torralba
769ec16803
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-02-14 17:25:08 +01:00
Tony Torralba
5a82d2188a
Fix double quotes in MaD row
2024-02-14 17:25:08 +01:00
Tony Torralba
85b22a2b98
Fix QHelp
2024-02-14 17:25:08 +01:00
Tony Torralba
ad7d40f0af
Add missing QLDoc
2024-02-14 17:25:08 +01:00
Tony Torralba
2a30898af6
Go: Promote go/missing-jwt-signature-check from experimental
2024-02-14 17:25:03 +01:00
Tony Torralba
1202b5b429
Go: Use less confusing name for hardcoded credentials tests
...
We don't want name-based heuristics to pick these variable names, but also using something like 'safeName' may mislead readers into believing the test cases are intended to be GOOD cases (i.e. safe)
2024-02-14 17:06:05 +01:00
Chris Smowton
7ed73bc4ed
change note
2024-02-14 15:45:03 +00:00
Chris Smowton
9016997b51
Golang: fix flow from a map value via a range statement
2024-02-14 14:56:24 +00:00
Tony Torralba
5ce35e47b9
Adjust a test case so that the key isn't considered dummy
...
(len < 4)
2024-02-14 13:06:31 +01:00
Tony Torralba
458bbb3581
Rename fwk module
2024-02-14 12:23:27 +01:00
Tony Torralba
16284fdd20
Discard sources that are obvious dummy values
2024-02-14 12:21:52 +01:00
Tony Torralba
a76de495e0
Simplify sanitizers
...
Use DataFlow::returnedWithError instead
2024-02-14 12:21:51 +01:00
Tony Torralba
6b74cb7e75
Remove unneeded $ANYVERSION
2024-02-14 12:21:51 +01:00
Tony Torralba
3fb422ca25
Split Jwt.qll into framework libraries, which makes more sense
2024-02-14 12:21:38 +01:00
Tony Torralba
8afaa231ee
Update go/ql/lib/semmle/go/security/Jwt.qll
2024-02-14 12:15:20 +01:00
Tony Torralba
304998d50e
Update go/ql/src/Security/CWE-798/HardcodedCredentials.ql
2024-02-14 12:15:20 +01:00
Tony Torralba
84d1d72497
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-02-14 12:15:19 +01:00
Tony Torralba
750c8085cb
Remove duplicated main from tests
2024-02-14 12:15:19 +01:00
Tony Torralba
ba1faea630
Go: Promote go/hardcoded-key from experimental
2024-02-14 12:15:14 +01:00
