18 Commits

Author	SHA1	Message	Date
Aditya Sharad	2ecbecbd4b	Actions: Add stress test for complex command and string interpolation ... Anonymised version of a customer report that led to performance bottlenecks in Bash parsing. No results are expected from both query and library tests.	2025-06-09 09:29:15 -07:00
Neil Mendum	1a1c9b4ea4	actions: add some missing permissions	2025-05-14 17:28:54 +01:00
yoff	80ae8794f5	actions: update test expectations	2025-04-01 17:07:57 +02:00
yoff	bd7c684c6c	actions: add test with empty permissions	2025-04-01 17:06:32 +02:00
yoff	e7bb47f335	ruby: add MaD model for permissions needed by actions ... Use this to suggest minimal set of nedded permissions	2025-03-31 16:48:37 +02:00
Jaroslav Lobačevski	5f63fc2048	Fix potentially privileged pull request medium query	2025-03-20 20:23:07 +00:00
Andrew Eisenberg	2a0e133768	Move UnversionedImmutableAction.ql to experimental ... This query will give too many false positives for users until immutable actions is released.	2025-03-06 15:08:02 -08:00
martincostello	31913c4a55	Fix test ... Fix failing test.	2025-02-14 19:46:46 +00:00
Martin Costello	9a29cebe58	Fix docker SHA false positive ... Fix false positives for pinned Docker container images.	2025-02-14 12:35:55 +00:00
Dave Bartolomeo	e2ab65ea3e	Update qlref paths	2025-02-06 11:20:19 -05:00
Asger F	16634e6dc9	Merge pull request #18540 from JarLob/bash ... Actions: Improve bash support	2025-01-28 09:49:58 +01:00
Jaroslav Lobačevski	ab20625b8f	Fix the upper bound of the range	2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski	83d13c6f20	Fix lower range for known vulnerable actions	2025-01-22 17:30:19 +01:00
Jaroslav Lobačevski	6d94168ad9	gh view	2025-01-21 17:15:41 +00:00
Jaroslav Lobačevski	88529d42d0	Remove comparison	2025-01-20 16:28:35 +00:00
Jaroslav Lobačevski	da9d612a47	Improve bash support	2025-01-20 14:59:30 +00:00
Óscar San José	b39bfdbb04	Upgrade workflows to ubuntu-24	2025-01-17 11:22:15 +01:00
Dave Bartolomeo	ee7680df84	Move into actions subdirectory to prepare for migration to github/codeql	2024-12-18 14:35:15 -05:00