22 Commits

Author	SHA1	Message	Date
yoff	80ae8794f5	actions: update test expectations	2025-04-01 17:07:57 +02:00
yoff	bd7c684c6c	actions: add test with empty permissions	2025-04-01 17:06:32 +02:00
yoff	e7bb47f335	ruby: add MaD model for permissions needed by actions ... Use this to suggest minimal set of nedded permissions	2025-03-31 16:48:37 +02:00
Jaroslav Lobačevski	5f63fc2048	Fix potentially privileged pull request medium query	2025-03-20 20:23:07 +00:00
Andrew Eisenberg	2a0e133768	Move UnversionedImmutableAction.ql to experimental ... This query will give too many false positives for users until immutable actions is released.	2025-03-06 15:08:02 -08:00
martincostello	31913c4a55	Fix test ... Fix failing test.	2025-02-14 19:46:46 +00:00
Martin Costello	9a29cebe58	Fix docker SHA false positive ... Fix false positives for pinned Docker container images.	2025-02-14 12:35:55 +00:00
Dave Bartolomeo	e2ab65ea3e	Update qlref paths	2025-02-06 11:20:19 -05:00
Asger F	16634e6dc9	Merge pull request #18540 from JarLob/bash ... Actions: Improve bash support	2025-01-28 09:49:58 +01:00
Jaroslav Lobačevski	ab20625b8f	Fix the upper bound of the range	2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski	83d13c6f20	Fix lower range for known vulnerable actions	2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski	6d94168ad9	gh view	2025-01-21 17:15:41 +00:00
Jaroslav Lobačevski	88529d42d0	Remove comparison	2025-01-20 16:28:35 +00:00
Jaroslav Lobačevski	da9d612a47	Improve bash support	2025-01-20 14:59:30 +00:00
Óscar San José	b39bfdbb04	Upgrade workflows to ubuntu-24	2025-01-17 11:22:15 +01:00
Dave Bartolomeo	8b132274b5	Revert "Accept DB consistency check for now" ... This reverts commit dba6f0bb9f.	2024-12-19 09:47:42 -05:00
Dave Bartolomeo	dba6f0bb9f	Accept DB consistency check for now ... Failure tracked in https://github.com/github/codeql-team/issues/3655	2024-12-18 16:54:34 -05:00
Dave Bartolomeo	47e364a13b	Remove placeholder code	2024-12-18 14:51:24 -05:00
Dave Bartolomeo	dbc1fa6450	Merge Actions queries from github/codeql-actions	2024-12-18 14:39:43 -05:00
Dave Bartolomeo	ee7680df84	Move into actions subdirectory to prepare for migration to github/codeql	2024-12-18 14:35:15 -05:00
Dave Bartolomeo	3c9e19346c	Update test expectations	2024-10-29 16:53:36 -04:00
Dave Bartolomeo	dffc9e2e31	Create placeholder Actions QL packs	2024-10-25 17:45:05 -04:00