Chris Smowton
21366dd502
Go / configure-baseline: account for multiple vendor directories and the CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS setting
...
Our existing configure-baseline scripts would give the wrong result if a `vendor` directory wasn't at the root of the repository, or if the `CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS` variable was set to `true` indicating the user wants their vendored code scanned.
Here I replace the shell scripts that implemented the very simplest behaviour with a small Go program.
2024-08-20 15:56:22 +01:00
Tamas Vajk
73674e72e6
Use cancallation token in download stream copying
2024-08-20 16:51:32 +02:00
Tamas Vajk
658326d7f2
Work around some instability on Windows
2024-08-20 16:42:49 +02:00
Felicity Chapman
8b4e060934
Merge pull request #17199 from github/8456-remove-old-references
...
Remove references to a deprecated data flow library for C/C++
2024-08-20 15:42:13 +01:00
Tom Hvitved
d15e1b5598
Ruby: Prevent synthetic splat matching for actual splats at same positions
2024-08-20 16:21:59 +02:00
Tom Hvitved
c4b0f81883
Ruby: Prevent positional matching when preceded by a splat
2024-08-20 16:21:58 +02:00
Tom Hvitved
20dc242830
Ruby: Rework hash splat argument/parameter matching
2024-08-20 16:21:57 +02:00
Tom Hvitved
6d4f3bd014
Ruby: Rework splat argument/parameter matching
2024-08-20 16:21:56 +02:00
Owen Mansel-Chan
30f8d6e4ff
Allow MaD models for XSS sinks using "html-injection" or "js-injection"
2024-08-20 14:04:23 +01:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Tamas Vajk
07a5c20309
Fix/add doc comments
2024-08-20 14:35:31 +02:00
Tamas Vajk
a0dc20caef
Fix hashed value on Windows
2024-08-20 14:33:33 +02:00
Chris Smowton
f0327732ef
Merge pull request #17247 from smowton/smowton/admin/add-spring-component-scan-test
...
Java: add a test exercising Spring component liveness detection
2024-08-20 12:56:26 +01:00
Tamas Vajk
0037ad406d
C#: Adjust buildless source generator folders
2024-08-20 13:43:10 +02:00
Cornelius Riemenschneider
ff242dc6cf
Merge pull request #17252 from github/criemen/pytest-java
...
kotlin: Move integration tests to pytest
2024-08-20 13:17:22 +02:00
Owen Mansel-Chan
38f4f4c724
Merge pull request #17242 from owen-mc/go/mad/convert-sink-4
...
Go: convert sql-injection and nosql-injection sinks to use models-as-data
2024-08-20 12:01:40 +01:00
Tamas Vajk
79bd81fa12
C#: Adjust buildless package restore folders and tests
2024-08-20 12:12:23 +02:00
Cornelius Riemenschneider
932c07a0f4
Address review.
2024-08-20 11:46:28 +02:00
Anders Schack-Mulligen
e73fc94354
Dataflow: Add change note.
2024-08-20 10:12:01 +02:00
Anders Schack-Mulligen
8470e91c16
Legacy Dataflow: Sync.
2024-08-20 10:07:57 +02:00
Anders Schack-Mulligen
4afdb0927e
Dataflow: Remove src/sink grouping feature.
2024-08-20 10:07:36 +02:00
Ed Minnix
0361b5c342
Fix AllocationSizeOverflow expectations
2024-08-19 22:31:29 -04:00
Ed Minnix
bb1cf4f51f
Fix tests
2024-08-19 20:14:23 -04:00
Ed Minnix
e3ffbbe3b7
Fix extensible name in io/fs models
2024-08-19 19:02:07 -04:00
Ed Minnix
442026cc9d
Fix test results
2024-08-19 17:23:32 -04:00
Ed Minnix
2629e09b67
Add io/ioutil and io/fs models
2024-08-19 17:22:46 -04:00
Ed Minnix
a308bdb75d
Modify UnhandledCloseWritableHandle to use post processing
2024-08-19 12:59:34 -04:00
Geoffrey White
4c5c6c6968
Merge pull request #17148 from geoffw0/hardkey
...
Swift: Additional test cases for swift/hardcoded-key
2024-08-19 17:45:34 +01:00
Ed Minnix
5e8185ac4f
Port test to inline expectations test
2024-08-19 12:44:30 -04:00
Ed Minnix
704cd8aee3
Update change note
2024-08-19 12:28:55 -04:00
Edward Minnix III
fc38476e42
Fix models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-19 12:25:55 -04:00
Ed Minnix
f89174a6f3
CI changes (provenance)
2024-08-19 12:25:52 -04:00
Ed Minnix
0f7ad98a23
Change note
2024-08-19 12:25:48 -04:00
Ed Minnix
eb8c785c6b
Fix formatting
2024-08-19 12:25:43 -04:00
Ed Minnix
3f640a99d3
Tests for file models
2024-08-19 12:25:37 -04:00
Ed Minnix
383e27c2bd
Add file sources
2024-08-19 12:25:27 -04:00
Chris Smowton
80e03c3c51
Improve ql/doc style
2024-08-19 16:25:06 +01:00
Chris Smowton
27522a2781
Remove redundant imports
2024-08-19 16:23:06 +01:00
Tamas Vajk
9d7314febb
C#: Change random temp folder names to hash values
2024-08-19 15:56:56 +02:00
Cornelius Riemenschneider
35ff4d69b7
Merge branch 'main' into impr/add-retry-logic-to-file-download
2024-08-19 12:46:29 +02:00
Tamas Vajk
8b6c293b5c
C#: Add retry logic to file (nuget.exe, dotnet-install.sh) downloads
2024-08-19 12:19:51 +02:00
Cornelius Riemenschneider
33f87c0c46
Port linux/kotlin tests to pytest.
2024-08-19 11:33:25 +02:00
Cornelius Riemenschneider
ccd90f25ba
Port posix/kotlin tests to pytest.
2024-08-19 11:33:24 +02:00
Cornelius Riemenschneider
c2aff1ea97
Port all-platforms/kotlin tests to pytest.
2024-08-19 11:33:23 +02:00
Asger F
3be219c79d
Merge pull request #17243 from asgerf/js/post-message-source-client-side
...
JS: Classify post-message events as client side taint sources
2024-08-19 11:09:26 +02:00
Cornelius Riemenschneider
ed7f3305d9
Move legacy marker only to java tests.
2024-08-19 10:47:15 +02:00
Felicity Chapman
dc0832c3d8
Update docs/codeql/codeql-language-guides/analyzing-data-flow-in-cpp.rst
2024-08-19 09:42:04 +01:00
Geoffrey White
a25d9c7397
Merge pull request #17220 from paldepind/reuse-unbounded-in-tainted-allocation-size
...
C++: Reuse bounded predicate in TaintedAllocationSize query
2024-08-19 09:37:55 +01:00
Cornelius Riemenschneider
2933a3be9c
Merge pull request #17088 from github/criemen/modext-isolation
...
`crate_universe`: Enable modext isolation.
2024-08-19 10:22:55 +02:00
Cornelius Riemenschneider
675e920667
Fix formatting.
2024-08-19 09:00:08 +02:00
