Jean Helie
b08fa43fdf
update tests
2023-01-17 12:20:17 +01:00
Jean Helie
f07984bab2
update test data
2023-01-17 12:20:17 +01:00
Jean Helie
13aaa22df5
add bosted version of ShellCommandInjectionFromEnvironment
2023-01-17 12:20:17 +01:00
Jean Helie
938a7e828c
update tests
2022-12-16 15:31:43 +01:00
Jean Helie
cd0220b248
update autogenerated data for endpoint_large_scale
2022-12-16 14:03:01 +01:00
Jean Helie
904a4bd48b
fix script updating endpoint_large_scale test data
2022-12-16 14:03:00 +01:00
Tiferet Gazit
1a9dd48a88
Merge pull request #11551 from github/tiferet/endpoint-characteristics-test
...
ATM: Test for contradictory endpoint characteristics
2022-12-06 18:36:41 -08:00
tiferet
cf29cde2e8
Apply suggestions from code review
2022-12-06 18:05:04 -08:00
tiferet
93e3c72c6a
Test for contradictory endpoint characteristics
2022-12-02 10:29:39 -08:00
Tiferet Gazit
c0aae3d68e
Apply suggestions from code review
...
Co-authored-by: Stephan Brandauer <kaeluka@github.com >
2022-12-02 09:00:45 -08:00
tiferet
d17383d98c
Add XssThroughDom
2022-12-02 06:59:32 -08:00
tiferet
294f34bf07
Small improvement
...
Not strictly needed, but better to keep things private when possible
2022-12-02 06:59:31 -08:00
tiferet
a317f2bfe2
Test for endpoints scored at inference time
...
Adds a test to detect changes in the endpoints that get scored at inference time.
2022-12-02 06:59:31 -08:00
Jean Helie
352d1a7e8c
ATM: update tests
2022-12-01 19:01:30 +01:00
Jean Helie
880548bafc
Merge branch 'main' into tiferet/boost-xss-through-dom
2022-12-01 18:13:27 +01:00
Jean Helie
50a3c0d725
ATM: update expected ML test values
2022-12-01 17:53:09 +01:00
Jean Helie
f388703a3d
ATM: update further files following the addition of XssThroughDom query
2022-12-01 17:45:07 +01:00
tiferet
a0a742eb82
Rename predicates to fit style guide:
...
- `getEndpoints` → `appliesToEndpoint`
- `getImplications` → `hasImplications`
- `getAlerts` → `hasAlert`
2022-11-30 17:01:56 -08:00
tiferet
4580b55673
Oops -- forgot to stage one file in the previous commit :)
2022-11-28 11:34:34 -08:00
tiferet
99de397a5f
Remove redundant code
...
`isOtherModeledArgument` and `isArgumentToBuiltinFunction` contained the old logic for selecting negative endpoints for training.
These can now be deleted, and replaced by a single base class that collects all EndpointCharacteristics that are currently used to indicate negative training samples: `OtherModeledArgumentCharacteristic`.
This in turn lets us delete code from `StandardEndpointFilters` that effectively said that endpoints that are high-confidence non-sinks shouldn't be scored at inference time, either.
2022-11-28 11:34:33 -08:00
tiferet
4a1382925e
Remove some imports that are no longer used
2022-11-16 14:01:16 -08:00
tiferet
0fd013f9fd
Update the reason names in FilteredTruePositives.expected.
...
This is needed because we changed the names of three endpoint filters that were all called "not a direct argument to a likely external library call or a heuristic sink" in order to disambiguate them (fc56c5a022
2022-11-16 11:54:10 -08:00
tiferet
eab270eb84
Move the definitions of isEffectiveSink and getAReasonSinkExcluded to the base class.
...
They can now be implemented generically for all sink types.
2022-11-16 11:47:24 -08:00
tiferet
cb632b3534
Delete the file ExtractEndpointData.expected which was leftover in the last PR
2022-11-15 17:11:34 -08:00
tiferet
b47723d607
Delete ExtractEndpointData.
...
Also remove the associated test files.
2022-11-14 14:57:59 -08:00
Henry Mercer
c0ac7ad7db
Remove query for worsening-based classifier evaluation
2022-10-14 15:35:43 +01:00
Henry Mercer
e3b54efb68
ATM: Update expected test output
...
Update the expected test output given some changes to the JavaScript
libraries which reclassified one of the test endpoints.
2022-09-28 20:00:40 +01:00
Stephan Brandauer
ac097d5f2a
fix now-broken tests
2022-09-01 16:05:35 +02:00
erik-krogh
cc7a9ef97a
rename more acronyms
2022-08-25 20:52:27 +02:00
Erik Krogh Kristensen
887f6557ed
fix common misspellings throughout github/codeql
2022-08-10 23:21:41 +02:00
Erik Krogh Kristensen
4bc36d82f6
update expected output for ATM
2022-04-20 18:10:56 +02:00
Erik Krogh Kristensen
67e1ffdd3e
fix isKnownStepSrc such that it actually includes taint/dataflow-steps
2022-03-31 09:46:01 +02:00
Chuan-kai Lin
a8dabb238d
JS: Fix expected test output for ATM queries
2022-03-30 11:35:17 -07:00
Henry Mercer
fbcb8d6857
JS: Migrate CodeQL tests for ML-powered queries
2022-02-02 13:15:04 +00:00
