Mathias Vorreiter Pedersen
|
70a8364a38
|
C++: Add another convenience predicate on 'BinaryInstruction'.
|
2025-09-18 11:05:45 +01:00 |
|
Mathias Vorreiter Pedersen
|
19b8e0db9c
|
C++: Add a few subclasses to 'EdgeKind'.
|
2025-09-18 11:05:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
be8195ab7d
|
C++: Do not rely on dataflow nodes when implement 'getAUse' and 'getAnIndirectUse'. This will solve a non-monotonic recursion issue later.
|
2025-09-18 11:05:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
f47dd2bbc6
|
C++: Add a 'hasInputFromBlock' predicate.
|
2025-09-18 11:05:38 +01:00 |
|
Mathias Vorreiter Pedersen
|
f55ace8311
|
C++: Make the return type a bit more precise.
|
2025-09-18 10:10:07 +01:00 |
|
Joe Farebrother
|
2cd1d2fd2f
|
Merge pull request #20392 from joefarebrother/python-qual-file-not-closed
Python: Improve File Not Closed query to reduce false positives and provide clearer alerts
|
2025-09-18 09:33:08 +01:00 |
|
Anders Schack-Mulligen
|
8f859647c4
|
Merge pull request #20457 from aschackmull/shared/cfg-fix-joinblock-pred
Shared/Cfg: Fix missing JoinBlockPredecessor.
|
2025-09-18 09:28:24 +02:00 |
|
Tom Hvitved
|
51a33c279d
|
Merge pull request #20460 from hvitved/rust/source-inline-flow-path-problem
|
2025-09-18 09:27:06 +02:00 |
|
Anders Schack-Mulligen
|
d93b2edc0d
|
Ruby: Accept test changes.
|
2025-09-18 08:13:43 +02:00 |
|
Tom Hvitved
|
aba2cb487e
|
Rust: Convert data flow test to @kind path-problem
|
2025-09-17 20:52:17 +02:00 |
|
Anders Schack-Mulligen
|
d5a238768c
|
Shared/Cfg: Fix missing JoinBlockPredecessor.
|
2025-09-17 16:37:23 +02:00 |
|
Napalys Klicius
|
4f8166a661
|
Merge pull request #20450 from Napalys/js/graph-ql-ench
JS: Improve graphql flow
|
2025-09-17 16:32:01 +02:00 |
|
Simon Friis Vindum
|
203788d4f1
|
Merge pull request #20408 from paldepind/rust/update-rust-analyzer
Rust: Upgrade to rust-analyzer 0.0.301
|
2025-09-17 16:04:35 +02:00 |
|
Michael Nebel
|
398f29a995
|
Merge pull request #20292 from michaelnebel/csharp/code-quality-extended
C#: Add most `medium` precision queries to the `code-quality-extended` suite.
|
2025-09-17 14:34:08 +02:00 |
|
Joe Farebrother
|
f3802ec60f
|
Merge pull request #20217 from joefarebrother/python-qual-signature-mismatch
Python: Modernize the Signature Mismatch query
|
2025-09-17 13:29:33 +01:00 |
|
Ian Lynagh
|
c653d939d9
|
Merge pull request #20451 from github/post-release-prep/codeql-cli-2.23.1
Post-release preparation for codeql-cli-2.23.1
|
2025-09-17 13:00:14 +01:00 |
|
Michael Nebel
|
34ebed1a24
|
Merge pull request #20402 from michaelnebel/python/code-quality-extended
Python: Add most `medium` precision queries to the `code-quality-extended` suite.
|
2025-09-17 13:48:35 +02:00 |
|
Michael Nebel
|
6d330891db
|
Merge pull request #20395 from michaelnebel/javascript/code-quality-extended
JS: Add most `medium` precision queries to the `code-quality-extended` suite.
|
2025-09-17 13:47:02 +02:00 |
|
Michael Nebel
|
7589d0a18a
|
Merge pull request #20394 from michaelnebel/java/code-quality-extended
Java: Add most `medium` precision queries to the `code-quality-extended` suite.
|
2025-09-17 13:46:24 +02:00 |
|
Taus
|
f5a06bef4a
|
Merge pull request #19929 from github/tausbn/python-update-tree-sitter-dependency
Python: Update `tree-sitter` dependency
|
2025-09-17 13:40:13 +02:00 |
|
Napalys Klicius
|
4226fd29f5
|
Merge pull request #20162 from Napalys/python/global_variable_tracking
Python: Add jump steps for global variable nested field access
|
2025-09-17 13:38:07 +02:00 |
|
Anders Schack-Mulligen
|
ab5f6717b6
|
Merge pull request #20449 from aschackmull/csharp/nullguard-pattern
C#: Bugfix for nullguards for complex patterns.
|
2025-09-17 13:10:16 +02:00 |
|
Anders Schack-Mulligen
|
afc98cacbe
|
C#: Add change note.
|
2025-09-17 12:49:25 +02:00 |
|
Napalys Klicius
|
7affcf40c2
|
JS: Add variableValues to the previous summaryModel to enchance the flow.
|
2025-09-17 12:24:14 +02:00 |
|
Napalys Klicius
|
6c18b4de40
|
JS: Add test case for graph ql variableValues injection
|
2025-09-17 12:21:21 +02:00 |
|
github-actions[bot]
|
4e8343664f
|
Post-release preparation for codeql-cli-2.23.1
|
2025-09-17 10:13:40 +00:00 |
|
Anders Schack-Mulligen
|
5e76d5ff3f
|
C#: Rename predicate as per review, and fixup qltest.
|
2025-09-17 11:58:39 +02:00 |
|
Napalys Klicius
|
6d461d6b50
|
JS: Add change note
|
2025-09-17 11:48:49 +02:00 |
|
Napalys Klicius
|
4282005e32
|
JS: Add summary model for graphql's rootValue
|
2025-09-17 11:48:44 +02:00 |
|
Simon Friis Vindum
|
05d5c1dda7
|
Merge pull request #20398 from paldepind/rust/warp-model
Rust: Add tests and models for Warp
|
2025-09-17 11:37:56 +02:00 |
|
Ian Lynagh
|
ce9c8e6e9f
|
Merge pull request #20447 from github/release-prep/2.23.1
Release preparation for version 2.23.1
codeql-cli/v2.23.1
|
2025-09-17 10:26:24 +01:00 |
|
Napalys Klicius
|
a6d728a66d
|
JS: Add test case with missing alert using graphql
|
2025-09-17 11:23:49 +02:00 |
|
Napalys Klicius
|
e1d27f340e
|
Merge pull request #20135 from Napalys/js/dynamodb
JS: Modeling of `aws-sdk` clients*
|
2025-09-17 10:47:39 +02:00 |
|
Simon Friis Vindum
|
c1ebe920a1
|
Rust: Update expected file
|
2025-09-17 10:38:00 +02:00 |
|
Napalys Klicius
|
ca667b5131
|
JS: fix test expectations from rebasing
|
2025-09-17 10:24:45 +02:00 |
|
Napalys Klicius
|
4df8db0d7e
|
Renamed AWS-V3-Common to @aws-sdk/client.Client
|
2025-09-17 10:21:29 +02:00 |
|
Napalys Klicius
|
10f3a83fcb
|
Fixed model type names
Co-authored-by: asgerf <asgerf@users.noreply.github.com>
|
2025-09-17 10:21:23 +02:00 |
|
Napalys Klicius
|
9ca4773227
|
Added modeling for CreatePreparedStatementCommand
|
2025-09-17 10:21:10 +02:00 |
|
Napalys Klicius
|
872b6d8bee
|
Added test case for CreatePreparedStatementCommand
|
2025-09-17 10:21:01 +02:00 |
|
Napalys Klicius
|
b89e70b5a0
|
Added test cases for aws sources
|
2025-09-17 10:20:52 +02:00 |
|
Napalys Klicius
|
801a34f6a1
|
Moved typeModel at the start of the file
|
2025-09-17 10:20:24 +02:00 |
|
Napalys Klicius
|
9beac51586
|
Unified aws-db modeling into singular file
|
2025-09-17 10:20:10 +02:00 |
|
Napalys Klicius
|
5b31350e83
|
Added tests and modeling of database-access-result
|
2025-09-17 10:20:01 +02:00 |
|
Napalys Klicius
|
93d9ae73b7
|
Updated change note
|
2025-09-17 10:19:52 +02:00 |
|
Napalys Klicius
|
e5f02852e1
|
Added modeling of rds v2 and v3 for sql injections
|
2025-09-17 10:19:22 +02:00 |
|
Napalys Klicius
|
5b5c17100c
|
Added test cases for client-rds-data for sql injections
|
2025-09-17 10:19:10 +02:00 |
|
Napalys Klicius
|
0e6bac73a7
|
Added modeling of athena v2 and v3 for sql injections
|
2025-09-17 10:18:58 +02:00 |
|
Napalys Klicius
|
af97b0edc2
|
Added test cases for athena v2 and v3 for sql injections
|
2025-09-17 10:16:38 +02:00 |
|
Napalys Klicius
|
ee1af432fe
|
Added modeling of client-s3 v2 and v3
|
2025-09-17 10:16:25 +02:00 |
|
Napalys Klicius
|
5e6118ef3f
|
Added test cases for client-s v2 and v3 sql injection
|
2025-09-17 10:15:43 +02:00 |
|