tiferet
cf289d57e9
Go back to the prompt of https://github.com/github/codeql-dca-main/issues/9475
2023-03-14 12:49:26 -07:00
tiferet
459050151a
Give more explicit instructions in the codex prompt, but don't solicit rare sink types.
2023-03-14 12:49:26 -07:00
tiferet
01979aeb62
Give more explicit instructions in the codex prompt.
2023-03-14 12:49:26 -07:00
tiferet
ef95f4c419
Minor prompt improvements:
...
- Tell codex explicitly that this is JavaScript code
- Replace "Dataflow node" with "Code snippet"
2023-03-14 12:49:26 -07:00
tiferet
ac5434b3f3
Minor prompt improvements:
...
Remove spaces that break the code syntax or make for strange code styling.
2023-03-14 12:49:26 -07:00
tiferet
ce17d94f80
In-line predicates that are costing a lot of compute time
2023-03-14 12:49:26 -07:00
tiferet
bcc4cdd376
Add a test that can be used to determine the alerts codex will surface for each query.
2023-03-14 12:49:25 -07:00
tiferet
9aba7a0bca
Bug fixes for things that interfere with using the codex model
2023-03-14 12:49:25 -07:00
tiferet
9a21539fca
Add a test that can be used to determine how well codex reproduces the manual modeling for each sink type.
2023-03-14 12:49:25 -07:00
tiferet
d76d11bd27
Fix endpointScores
2023-03-14 12:49:25 -07:00
tiferet
4603a66411
Bug fix in selecting a node's location:
...
Locations only exist where there are locatable structures in the DB. Thus, select the largest location that contains the node and at most `neighborhoodSize` lines before and after the node.
2023-03-14 12:49:25 -07:00
tiferet
b130b2e82f
Give endpoint types more intuitive names and then use those names directly in composing the codex prompt.
2023-03-14 12:49:25 -07:00
tiferet
94676ed713
Further improve the structure of endpoint scoring
2023-03-14 12:49:25 -07:00
tiferet
4ed57e71db
Remove tokens from the prompt that the Java side can't handle
2023-03-14 12:49:25 -07:00
tiferet
12def779e6
Change the prompt to use sink names defined in EndpointType
2023-03-14 12:49:25 -07:00
tiferet
a6c01042eb
Improve the structure of endpoint scoring
2023-03-14 12:49:25 -07:00
tiferet
fa36fc838b
Pull in the prompt work from branch tiferet/codex-prompt
2023-03-14 12:49:25 -07:00
tiferet
09bf2218d4
Merge in aeisenberg/atm-codex
2023-03-14 12:49:24 -07:00
Anders Schack-Mulligen
8d97fe9ed3
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Henry Mercer
079451142e
Merge branch 'main' into codeql-ci/atm/release-0.4.9
2023-03-09 16:08:22 +00:00
github-actions[bot]
a82aaea514
JS: Bump version of ML-powered library and query packs to 0.4.10
2023-03-09 15:54:49 +00:00
github-actions[bot]
f0bb25bfce
JS: Bump patch version of ML-powered library and query packs
2023-03-09 15:46:31 +00:00
github-actions[bot]
50c90bbc5c
ATM: Update model pack dependency of ML-powered model building and query packs
2023-03-02 17:31:03 +00:00
Alex Ford
7c85448cba
Merge pull request #12080 from alexrford/js-use-shared-cryptography
...
JS: Use shared `CryptographicOperation` concept
2023-02-27 12:26:38 +00:00
Henry Mercer
eb1fe57590
Merge branch 'main' into codeql-ci/atm/release-0.4.8
2023-02-23 16:23:32 +00:00
github-actions[bot]
7e2b286f03
JS: Bump version of ML-powered library and query packs to 0.4.9
2023-02-23 16:12:23 +00:00
github-actions[bot]
e02368f6fa
JS: Bump patch version of ML-powered library and query packs
2023-02-23 16:04:39 +00:00
Alex Ford
1556b1a728
Merge branch 'main' into js-use-shared-cryptography
2023-02-15 17:13:53 +00:00
Henry Mercer
e972cb069e
Merge branch 'main' into codeql-ci/atm/release-0.4.7
2023-02-07 21:31:08 +00:00
github-actions[bot]
4f76ebbb0b
JS: Bump version of ML-powered library and query packs to 0.4.8
2023-02-07 19:44:25 +00:00
github-actions[bot]
30b2644f17
JS: Bump patch version of ML-powered library and query packs
2023-02-07 19:34:58 +00:00
Alex Ford
7768026e70
Merge branch 'main' into js-use-shared-cryptography
2023-02-03 15:18:30 +00:00
Alex Ford
983055b8f9
JS: Use shared CryptographicOperation concept and implement BlockMode getBlockMode()
2023-02-02 20:30:30 +00:00
Henry Mercer
241951f53e
Merge branch 'main' into codeql-ci/atm/release-0.4.6
2023-01-23 18:24:36 +00:00
github-actions[bot]
be481d975c
JS: Bump version of ML-powered library and query packs to 0.4.7
2023-01-23 18:22:18 +00:00
github-actions[bot]
40a67d61d2
JS: Bump patch version of ML-powered library and query packs
2023-01-23 18:15:56 +00:00
Jean Helie
9e6f9c2705
Merge pull request #11709 from github/jhelie/add-shell-command-injection
...
ATM: add boosted version for `ShellCommandInjectionFromEnvironment` query
2023-01-20 16:03:30 +01:00
Jean Helie
fec7ea6964
ATM: add missing query help files
2023-01-17 12:20:17 +01:00
Jean Helie
b08fa43fdf
update tests
2023-01-17 12:20:17 +01:00
Jean Helie
f07984bab2
update test data
2023-01-17 12:20:17 +01:00
Jean Helie
13aaa22df5
add bosted version of ShellCommandInjectionFromEnvironment
2023-01-17 12:20:17 +01:00
Henry Mercer
70f1015fba
Merge branch 'main' into codeql-ci/atm/release-0.4.5
2023-01-12 12:32:25 +00:00
github-actions[bot]
76e121e359
JS: Bump version of ML-powered library and query packs to 0.4.6
2023-01-10 21:11:23 +00:00
github-actions[bot]
dc88bdccc7
JS: Bump patch version of ML-powered library and query packs
2023-01-10 21:04:31 +00:00
Tony Torralba
3b6dae41cd
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
Jean Helie
938a7e828c
update tests
2022-12-16 15:31:43 +01:00
Jean Helie
cd0220b248
update autogenerated data for endpoint_large_scale
2022-12-16 14:03:01 +01:00
Jean Helie
904a4bd48b
fix script updating endpoint_large_scale test data
2022-12-16 14:03:00 +01:00
Henry Mercer
6023a1225c
Merge pull request #11673 from github/codeql-ci/atm/release-0.4.4
...
JS: Bump version numbers of ML-powered packs after 0.4.4 release
2022-12-14 10:27:00 +00:00
Henry Mercer
423374a7b8
Merge branch 'main' into codeql-ci/atm/release-0.4.4
2022-12-13 14:26:21 +00:00
