Tiferet Gazit
855eddab80
Merge pull request #11174 from github/tiferet/non-sink-endpoint-characteristics
...
Non-sink endpoint characteristics
2022-11-14 09:37:25 -08:00
github-actions[bot]
b5b69e9357
JS: Bump version of ML-powered library and query packs to 0.4.2
2022-11-11 12:48:00 +00:00
github-actions[bot]
3e5e695325
JS: Bump patch version of ML-powered library and query packs
2022-11-11 12:36:19 +00:00
tiferet
dbcdc2209e
Use names constants for confidence levels
2022-11-09 14:25:08 -08:00
tiferet
b6532fa9a0
Fix QLDoc style warning
2022-11-09 13:10:54 -08:00
tiferet
243980ef73
Documentation improvements
2022-11-09 13:04:16 -08:00
Tiferet Gazit
6cb01a210f
Apply suggestions from code review
...
Co-authored-by: Stephan Brandauer <kaeluka@github.com >
2022-11-09 12:53:52 -08:00
tiferet
ac14b6d685
Create EndpointCharacteristics to replace all existing NotASinkReasons and LikelyNotASinkReasons
2022-11-08 13:37:49 -08:00
tiferet
fadbdc1f63
Documentation improvements suggested by Andrew
2022-11-08 11:45:33 -08:00
github-actions[bot]
69df9f9daa
JS: Bump version of ML-powered library and query packs to 0.4.1
2022-11-07 13:06:46 +00:00
github-actions[bot]
82277d8f56
JS: Bump minor version of ML-powered library and query packs
2022-11-07 13:00:28 +00:00
tiferet
833041c62e
Fix QLDoc style errors
2022-11-04 09:30:31 -07:00
tiferet
2aa4651534
Remove predicates not yet used from the current PR
2022-11-04 09:30:31 -07:00
tiferet
74c8bfff4f
Minor changes from code review
2022-11-04 09:30:31 -07:00
tiferet
e60c016fc6
Format fixes
2022-11-04 09:30:31 -07:00
tiferet
cbf81b8839
Improve the import structure
2022-11-04 09:30:31 -07:00
tiferet
300456cd3e
Enforce the abstraction over characteristics:
...
Make the implementations of specific `EndpointCharacteristic`s private.
2022-11-04 09:30:31 -07:00
tiferet
c0cc754fb5
Rename ClassificationReasons
...
Change the name to EndpointCharacteristics.
2022-11-04 09:30:30 -07:00
tiferet
a4939b91e7
Generalize the definition of a known sink:
...
If the list of reasons includes positive indicators with maximal confidence for this class, it's a known sink for the class.
This negates the need for each query config to define the isKnownSink predicate individually.
2022-11-04 09:30:29 -07:00
tiferet
08bbe596a2
Create the sink ClassificationReasons
...
Write the reasons that indicate that an endpoint is a sink for each sink type.
Also fix import error.
2022-11-04 09:30:29 -07:00
Henry Mercer
3e863a539a
ATM: Fix CodeQL pack workspace references
...
This fixes the
[ATM PR checks](https://github.com/github/codeql/actions/runs/3392995797/jobs/5639827326 )
breaking on main as a result of
https://github.com/github/codeql/pull/11004 .
2022-11-04 14:03:34 +00:00
Henry Mercer
1dc14bcaee
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.6
2022-10-25 10:54:08 +01:00
github-actions[bot]
caf3a098c8
JS: Bump version of ML-powered library and query packs to 0.3.7
2022-10-25 09:12:00 +00:00
github-actions[bot]
5d100c8036
JS: Bump patch version of ML-powered library and query packs
2022-10-25 09:00:40 +00:00
Josh Soref
a4beafbe44
spelling: classifier
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-19 04:27:37 -04:00
Henry Mercer
bfa9765a6d
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.5
2022-10-11 19:06:01 +01:00
github-actions[bot]
06bbede92b
JS: Bump version of ML-powered library and query packs to 0.3.6
2022-10-11 17:58:33 +00:00
github-actions[bot]
4e3a6e60b2
JS: Bump patch version of ML-powered library and query packs
2022-10-11 17:48:46 +00:00
github-actions[bot]
67d12cdc7d
JS: Bump patch version of ML-powered library and query packs
2022-09-28 17:14:15 +00:00
Stephan Brandauer
1bb781ad94
Merge branch 'main' into new-atm-features-rebased
2022-09-23 09:55:29 +02:00
Erik Krogh Kristensen
a4cd913aea
Merge pull request #10312 from erik-krogh/fix-caseDiff
...
ensure consistent casing of names
2022-09-19 10:43:12 +02:00
Henry Mercer
bc2de7ed4b
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.3
2022-09-13 15:15:56 +01:00
github-actions[bot]
b40def71b9
JS: Bump version of ML-powered library and query packs to 0.3.4
2022-09-13 14:11:16 +00:00
github-actions[bot]
e08e22ac32
JS: Bump patch version of ML-powered library and query packs
2022-09-13 14:06:57 +00:00
erik-krogh
26d8553f6e
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Erik Krogh Kristensen
5b61db9fd3
refactor miscellaneous expression uses to dataflow nodes
2022-09-05 16:11:55 +02:00
Erik Krogh Kristensen
c5b1588096
update the SQL/NoSQL models to use dataflow nodes
2022-09-05 16:11:54 +02:00
Erik Krogh Kristensen
30d929909c
deprecate RequestExpr and ResponseExpr and use ResponseNode and RequestNode instead
2022-09-05 15:46:25 +02:00
Stephan Brandauer
81d02cc963
optimize performance of a helper-predicate
2022-09-01 16:05:36 +02:00
Stephan Brandauer
cdbab187ca
remove unused code
2022-09-01 16:05:36 +02:00
Stephan Brandauer
f59c48ebb9
autoformatter
2022-09-01 16:05:36 +02:00
Stephan Brandauer
caf39592d4
better documentation
2022-09-01 16:05:36 +02:00
Stephan Brandauer
b9cb60c2cb
Review comments
...
Co-authored-by: Henry Mercer <henrymercer@github.com >
2022-09-01 16:05:36 +02:00
Stephan Brandauer
068a948c05
fix ql-for-ql warnings
2022-09-01 16:05:35 +02:00
Stephan Brandauer
3aa4e29dae
remove obsolete features
2022-09-01 16:05:35 +02:00
Stephan Brandauer
ed75080072
add stringConcatenatedWith feature to help the model learn that string concatenation leaves are usually not sinks
2022-09-01 16:05:35 +02:00
Stephan Brandauer
9468f62620
add assignedToPropName feature to let the model improve number of false positives for XSS query
2022-09-01 16:05:35 +02:00
Stephan Brandauer
db73a62bc2
fix bug in InputArgumentIndex feature
2022-09-01 16:05:34 +02:00
Stephan Brandauer
67500f85ba
performance fixes
2022-09-01 16:05:34 +02:00
Stephan Brandauer
96919eea80
use ? for unknown parameternames
2022-09-01 16:05:34 +02:00
