Paolo Tranquilli
|
7b8c11379d
|
Javascript: use codeql_pack for javascript extractor
|
2024-06-03 23:14:44 +02:00 |
|
Paolo Tranquilli
|
096a31dbef
|
Mark all integration tests as legacy
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
|
2024-05-31 16:04:50 +02:00 |
|
github-actions[bot]
|
906b65d09c
|
Post-release preparation for codeql-cli-2.17.4
|
2024-05-28 18:02:25 +00:00 |
|
github-actions[bot]
|
33b4ae8bbb
|
Release preparation for version 2.17.4
|
2024-05-28 15:44:32 +00:00 |
|
am0o0
|
2b929c4d2d
|
remove old expected test file
|
2024-05-25 20:45:34 +02:00 |
|
am0o0
|
1fc481ce81
|
v2: it is basically the first stable version :))
|
2024-05-25 20:43:36 +02:00 |
|
am0o0
|
ea05b297a3
|
update expected test files
|
2024-05-25 19:40:37 +02:00 |
|
am0o0
|
14daf58767
|
update tests, add test cases for query with local sources
|
2024-05-25 18:17:56 +02:00 |
|
am0o0
|
8fde8c2db4
|
change test dir name
|
2024-05-25 13:54:31 +02:00 |
|
am0o0
|
b397f57357
|
change queries id according to new naming
|
2024-05-25 13:53:33 +02:00 |
|
am0o0
|
300c82a8ff
|
use Verification instead of validation in files name
|
2024-05-25 13:52:32 +02:00 |
|
am0o0
|
76beffb04a
|
change dir name
|
2024-05-25 13:49:34 +02:00 |
|
am0o0
|
f1533f40b6
|
change query files name
|
2024-05-25 13:49:01 +02:00 |
|
am0o0
|
d2d945c66d
|
merge all JWT pkgs into one
|
2024-05-25 13:47:43 +02:00 |
|
am0o0
|
4af4040bd6
|
change duplicate query IDs
|
2024-05-25 13:29:16 +02:00 |
|
am0o0
|
f905ac10c4
|
add jsonWebToken library file to remove duplicate predicate declrations
|
2024-05-25 13:28:13 +02:00 |
|
Erik Krogh Kristensen
|
c743abad54
|
Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa
JS: provide command execution sinks for execa package
|
2024-05-24 09:20:19 +02:00 |
|
Dave Bartolomeo
|
613ccaac1d
|
Add change note to all v1.0.0 packs
|
2024-05-23 13:01:22 -04:00 |
|
erik-krogh
|
c80f48b23a
|
Merge branch 'main' into amammad-js-CodeInjection_execa
|
2024-05-23 08:02:22 +02:00 |
|
Dave Bartolomeo
|
ffe4c8c87b
|
Update all pack versions to 1.0.0
|
2024-05-22 13:39:08 -04:00 |
|
am0o0
|
0895f7d971
|
update qlref files
|
2024-05-21 22:48:17 +02:00 |
|
am0o0
|
c470c078dc
|
move to experimental
|
2024-05-21 22:42:16 +02:00 |
|
erik-krogh
|
a30bac14e9
|
add change-note
|
2024-05-21 22:14:39 +02:00 |
|
erik-krogh
|
61c72361cd
|
move the "isFileTooLarge" earlier in the pipeline, so we're only doing it once
|
2024-05-21 20:01:24 +02:00 |
|
erik-krogh
|
241f977488
|
fix that very large TypeScript files would crash the extractor
|
2024-05-21 19:52:43 +02:00 |
|
Asger F
|
3b211089d6
|
JS: Remove redundant import
|
2024-05-21 14:40:17 +02:00 |
|
Asger F
|
6f19fc2fcd
|
JS: Add isTypeUsed to avoid overpruning
|
2024-05-21 14:38:52 +02:00 |
|
Asger F
|
632cce2c16
|
JS: Add failing test due to overpruning
|
2024-05-21 14:20:13 +02:00 |
|
Asger F
|
43abc72780
|
JS: Add TypeModel.isTypeUsed
f
|
2024-05-21 14:19:56 +02:00 |
|
Joe Farebrother
|
01a6c5e82f
|
Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics
Ruby/Python/JS/Swift: Add category of Private information to shared sensitive data heuristics
|
2024-05-21 09:07:13 +01:00 |
|
erik-krogh
|
c166cb406a
|
Merge branch 'main' into amammad-js-CodeInjection_execa
|
2024-05-21 08:48:12 +02:00 |
|
Erik Krogh Kristensen
|
03cf9b702c
|
Merge pull request #14291 from am0o0/amammad-js-CodeInjection_Shelljs
JS: Shelljs improvement
|
2024-05-17 11:14:11 +02:00 |
|
am0o0
|
42a9962519
|
make shellJSMember predicate private, improve predicate document
|
2024-05-16 14:05:06 +02:00 |
|
Asger F
|
499c4df79b
|
Merge pull request #13554 from am0o0/amammad-js-bombs
JS: Decompression Bombs
|
2024-05-16 13:25:41 +02:00 |
|
erik-krogh
|
56dff8540f
|
add an example of how to get a floating point value between 0 and 1
|
2024-05-16 11:15:07 +02:00 |
|
erik-krogh
|
066f3b61a2
|
RandomSource is deprecated, it's crypto now
|
2024-05-16 11:14:50 +02:00 |
|
github-actions[bot]
|
32e8b5c667
|
Post-release preparation for codeql-cli-2.17.3
|
2024-05-14 21:14:08 +00:00 |
|
github-actions[bot]
|
100166fa53
|
Release preparation for version 2.17.3
|
2024-05-14 19:23:18 +00:00 |
|
Chuan-kai Lin
|
1758a1e04b
|
Merge pull request #16422 from github/cklin/javascript-entities-reorder
JS: Use entities in reorder directives
|
2024-05-13 10:26:41 -07:00 |
|
Joe Farebrother
|
da93a08639
|
Add change notes
No change note is needed for Swift, as the new heuristics are unused and thus should not affect any queries.
|
2024-05-09 10:03:20 +01:00 |
|
Joe Farebrother
|
9aff22c664
|
Fix typos in sensitive data regex
|
2024-05-09 09:39:03 +01:00 |
|
Joe Farebrother
|
5f4bc4197b
|
Add private category to sensitive data heuristics
|
2024-05-08 10:02:00 +01:00 |
|
Chuan-kai Lin
|
9b51e0e0ee
|
JS: Use entities in reorder directives
|
2024-05-03 11:17:13 -07:00 |
|
erik-krogh
|
39a8b49222
|
add qhelp recommendation that you can use an obvious placeholder value
|
2024-05-03 19:37:31 +02:00 |
|
erik-krogh
|
b209fc67cb
|
test the change to hardcoded-credentials
|
2024-05-03 19:34:18 +02:00 |
|
erik-krogh
|
d9e8e0e00a
|
use some more standard values for credentials-kind for NodeJS client credentials
|
2024-05-03 13:58:37 +02:00 |
|
erik-krogh
|
ff85db36e2
|
exclude credentials as kind key from hardcoded-credentials when the key looks like a dummy password
|
2024-05-03 13:58:11 +02:00 |
|
Owen Mansel-Chan
|
83249cd9c2
|
Fix grammar in comment
|
2024-05-02 09:59:48 +01:00 |
|
Owen Mansel-Chan
|
16dcc0969b
|
Standardise comment explaining why extensible predicates must be defined
|
2024-05-01 22:00:01 +01:00 |
|
Owen Mansel-Chan
|
09e59ccf44
|
Name files with empty definitions of MaD extensible predicates to erowdmpty.model.yml
|
2024-05-01 21:39:38 +01:00 |
|