github-actions[bot]
|
73d06f26cb
|
Post-release preparation for codeql-cli-2.24.1
|
2026-02-02 14:04:26 +00:00 |
|
github-actions[bot]
|
0db542e9f0
|
Release preparation for version 2.24.1
|
2026-02-02 12:09:09 +00:00 |
|
Chris Smowton
|
a326ce34a8
|
change note
|
2026-01-23 15:47:17 +00:00 |
|
Chris Smowton
|
dc26a57548
|
Use posessive quantifier to avoid stack overflow on large ${{}} expressions
|
2026-01-23 15:35:24 +00:00 |
|
github-actions[bot]
|
48475e66af
|
Post-release preparation for codeql-cli-2.24.0
|
2026-01-19 15:49:08 +00:00 |
|
github-actions[bot]
|
4142b9c4ce
|
Release preparation for version 2.24.0
|
2026-01-19 14:49:14 +00:00 |
|
Ian Lynagh
|
dcd0a69759
|
Merge remote-tracking branch 'upstream/main' into igfoo/mb
|
2026-01-13 01:01:35 +00:00 |
|
github-actions[bot]
|
2cb932cf5d
|
Post-release preparation for codeql-cli-2.23.9
|
2026-01-06 15:42:16 +00:00 |
|
github-actions[bot]
|
c00663766e
|
Release preparation for version 2.23.9
|
2026-01-05 11:57:06 +00:00 |
|
Óscar San José
|
d972af9ef8
|
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
|
2025-12-12 13:22:08 +01:00 |
|
github-actions[bot]
|
2854330759
|
Post-release preparation for codeql-cli-2.23.8
|
2025-12-08 15:49:10 +00:00 |
|
github-actions[bot]
|
66c51e979e
|
Release preparation for version 2.23.8
|
2025-12-08 14:38:23 +00:00 |
|
Óscar San José
|
bc6133de5c
|
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
|
2025-12-05 19:31:47 +01:00 |
|
Owen Mansel-Chan
|
4a16de2bc8
|
Pull out logic into separate predicate
|
2025-12-04 16:50:39 +00:00 |
|
Owen Mansel-Chan
|
fb841ea591
|
Make predicates containing query logic more self-contained
|
2025-12-04 16:50:37 +00:00 |
|
Owen Mansel-Chan
|
8bac1dec83
|
Add change note
|
2025-12-04 16:50:36 +00:00 |
|
Owen Mansel-Chan
|
f6bdb3a126
|
Fix filtering of code injection alerts between medium and critical
|
2025-12-04 16:50:34 +00:00 |
|
github-actions[bot]
|
085faa2bdb
|
Post-release preparation for codeql-cli-2.23.7
|
2025-12-02 16:39:43 +00:00 |
|
github-actions[bot]
|
a045b317ac
|
Release preparation for version 2.23.7
|
2025-12-02 15:31:27 +00:00 |
|
github-actions[bot]
|
19a13467e0
|
Release preparation for version 2.23.7
|
2025-12-01 16:07:37 +00:00 |
|
github-actions[bot]
|
5ee45af3aa
|
Post-release preparation for codeql-cli-2.23.6
|
2025-11-18 09:53:12 +00:00 |
|
github-actions[bot]
|
18fa6799ce
|
Release preparation for version 2.23.6
|
2025-11-17 16:38:07 +00:00 |
|
github-actions[bot]
|
4014df9a6e
|
Post-release preparation for codeql-cli-2.23.4
|
2025-11-04 17:57:52 +00:00 |
|
github-actions[bot]
|
64fcdd1f2f
|
Release preparation for version 2.23.4
|
2025-11-03 14:52:23 +00:00 |
|
Nora Dimitrijević
|
974d174757
|
Actions/CodeInjectionQuery
actions/ql/src/Security/CWE-094/CodeInjectionMedium.ql
actions/ql/src/Security/CWE-094/CodeInjectionCritical.ql
|
2025-10-28 09:41:24 +01:00 |
|
Nora Dimitrijević
|
62fde8f6e7
|
Actions/ArgumentInjectionQuery
actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.ql
actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.ql
|
2025-10-28 09:41:21 +01:00 |
|
Nora Dimitrijević
|
c40223319c
|
Actions/EnvVarInjectionQuery
actions/ql/src/Security/CWE-077/EnvVarInjectionMedium.ql
actions/ql/src/Security/CWE-077/EnvVarInjectionCritical.ql
|
2025-10-28 09:41:18 +01:00 |
|
Nora Dimitrijević
|
edc72d29d7
|
Actions/EnvPathInjectionQuery
actions/ql/src/Security/CWE-077/EnvPathInjectionMedium.ql
actions/ql/src/Security/CWE-077/EnvPathInjectionCritical.ql
|
2025-10-28 09:41:16 +01:00 |
|
Nora Dimitrijević
|
1f53ffbdd7
|
Actions/ArtifactPoisoningQuery
actions/ql/src/Security/CWE-829/ArtifactPoisoningCritical.ql
actions/ql/src/Security/CWE-829/ArtifactPoisoningMedium.ql
|
2025-10-28 09:41:13 +01:00 |
|
Nora Dimitrijević
|
bb10307303
|
Actions/SecretExfiltrationQuery
actions/ql/src/experimental/Security/CWE-200/SecretExfiltration.ql uses source as endpoint
|
2025-10-28 09:38:38 +01:00 |
|
Nora Dimitrijević
|
890ca8e7d1
|
Actions/RequestForgeryQuery
actions/ql/src/experimental/Security/CWE-918/RequestForgery.ql uses source as endpoint
|
2025-10-28 09:38:21 +01:00 |
|
Nora Dimitrijević
|
3fa8259042
|
Actions/OutputClobberingQuery
actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql uses source as endpoint
|
2025-10-28 09:38:01 +01:00 |
|
github-actions[bot]
|
6dd07790ac
|
Post-release preparation for codeql-cli-2.23.3
|
2025-10-14 11:16:33 +00:00 |
|
github-actions[bot]
|
33542f7d40
|
Release preparation for version 2.23.3
|
2025-10-14 09:30:24 +00:00 |
|
github-actions[bot]
|
a7a4e43991
|
Post-release preparation for codeql-cli-2.23.2
|
2025-09-29 15:10:19 +00:00 |
|
github-actions[bot]
|
d2130a589b
|
Release preparation for version 2.23.2
|
2025-09-29 10:28:45 +00:00 |
|
github-actions[bot]
|
4e8343664f
|
Post-release preparation for codeql-cli-2.23.1
|
2025-09-17 10:13:40 +00:00 |
|
github-actions[bot]
|
02a1b1efcb
|
Release preparation for version 2.23.1
|
2025-09-16 14:14:42 +00:00 |
|
Michael Nebel
|
a9baf34629
|
Merge pull request #20324 from michaelnebel/actions/ql4ql
Actions: Fix some Ql4Ql violations.
|
2025-09-03 12:29:06 +02:00 |
|
Arthur Baars
|
0bb7fdccf6
|
Merge pull request #20347 from github/post-release-prep/codeql-cli-2.23.0
Post-release preparation for codeql-cli-2.23.0
|
2025-09-02 14:14:03 +02:00 |
|
github-actions[bot]
|
e8a2600a0c
|
Post-release preparation for codeql-cli-2.23.0
|
2025-09-02 11:46:23 +00:00 |
|
github-actions[bot]
|
0bfa93828b
|
Release preparation for version 2.23.0
|
2025-09-02 11:09:32 +00:00 |
|
Michael Nebel
|
64f9758c29
|
Actions: Fix some Ql4Ql violations.
|
2025-09-01 14:45:00 +02:00 |
|
Anders Schack-Mulligen
|
144e34c669
|
Shared: Use shared SuccessorType in shared Cfg and BasicBlock libs.
|
2025-09-01 13:43:32 +02:00 |
|
Anders Schack-Mulligen
|
92fcda3cc7
|
Actions: Use shared SuccessorType.
|
2025-09-01 12:56:08 +02:00 |
|
github-actions[bot]
|
42e3d31c49
|
Post-release preparation for codeql-cli-2.22.4
|
2025-08-18 14:42:42 +00:00 |
|
github-actions[bot]
|
90d29994c8
|
Release preparation for version 2.22.4
|
2025-08-18 14:06:09 +00:00 |
|
Nora Dimitrijević
|
126d24a522
|
[DIFF-INFORMED] Actions: EnvVarInjection
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/actions/ql/src/Security/CWE-077/EnvVarInjectionMedium.ql#L35
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/actions/ql/src/Security/CWE-077/EnvVarInjectionCritical.ql#L46
|
2025-08-15 11:11:12 +02:00 |
|
Nora Dimitrijević
|
f1445eb52f
|
[DIFF-INFORMED] Actions: EnvPathInjection
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/actions/ql/src/Security/CWE-077/EnvPathInjectionMedium.ql#L30
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/actions/ql/src/Security/CWE-077/EnvPathInjectionCritical.ql#L37
|
2025-08-15 11:11:07 +02:00 |
|
Nora Dimitrijević
|
f1b995a736
|
[DIFF-INFORMED] Actions: CommandInjection
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/actions/ql/src/experimental/Security/CWE-078/CommandInjectionMedium.ql#L24
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/actions/ql/src/experimental/Security/CWE-078/CommandInjectionCritical.ql#L28
|
2025-08-15 11:11:03 +02:00 |
|