Edward Minnix III
e066c52ac6
Update change note
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-20 12:33:38 -04:00
Chris Smowton
fc301206d1
Change note
2024-08-20 17:11:58 +01:00
Chris Smowton
3acab640b2
Add configure-baseline integration test
2024-08-20 17:07:09 +01:00
Chris Smowton
15b5bcc67c
Output to stdout, not stderr
2024-08-20 17:01:54 +01:00
Chris Smowton
8b9617cd38
Update bazel build files
2024-08-20 15:56:28 +01:00
Chris Smowton
ea3e5c8a99
Clarify comment
2024-08-20 15:56:27 +01:00
Chris Smowton
f1f6f9b580
Share vendor-dir extraction logic between extractor and configure-baseline script
2024-08-20 15:56:26 +01:00
Chris Smowton
22802fd41f
Improve struct naming
2024-08-20 15:56:25 +01:00
Chris Smowton
5d34dbf2c2
Remove unnecessary batch script flag
2024-08-20 15:56:24 +01:00
Chris Smowton
624d2b83c0
Tidy comments
2024-08-20 15:56:23 +01:00
Chris Smowton
21366dd502
Go / configure-baseline: account for multiple vendor directories and the CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS setting
...
Our existing configure-baseline scripts would give the wrong result if a `vendor` directory wasn't at the root of the repository, or if the `CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS` variable was set to `true` indicating the user wants their vendored code scanned.
Here I replace the shell scripts that implemented the very simplest behaviour with a small Go program.
2024-08-20 15:56:22 +01:00
Tamas Vajk
73674e72e6
Use cancallation token in download stream copying
2024-08-20 16:51:32 +02:00
Tamas Vajk
658326d7f2
Work around some instability on Windows
2024-08-20 16:42:49 +02:00
Felicity Chapman
8b4e060934
Merge pull request #17199 from github/8456-remove-old-references
...
Remove references to a deprecated data flow library for C/C++
2024-08-20 15:42:13 +01:00
Michael Nebel
6ea01b81bb
C#: Add some summary debugging queries.
2024-08-20 16:28:18 +02:00
Michael Nebel
fd311d5143
Java: Add some summary debugging queries.
2024-08-20 16:28:15 +02:00
Tom Hvitved
d15e1b5598
Ruby: Prevent synthetic splat matching for actual splats at same positions
2024-08-20 16:21:59 +02:00
Tom Hvitved
c4b0f81883
Ruby: Prevent positional matching when preceded by a splat
2024-08-20 16:21:58 +02:00
Tom Hvitved
20dc242830
Ruby: Rework hash splat argument/parameter matching
2024-08-20 16:21:57 +02:00
Tom Hvitved
6d4f3bd014
Ruby: Rework splat argument/parameter matching
2024-08-20 16:21:56 +02:00
Owen Mansel-Chan
30f8d6e4ff
Allow MaD models for XSS sinks using "html-injection" or "js-injection"
2024-08-20 14:04:23 +01:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Tamas Vajk
07a5c20309
Fix/add doc comments
2024-08-20 14:35:31 +02:00
Tamas Vajk
a0dc20caef
Fix hashed value on Windows
2024-08-20 14:33:33 +02:00
Chris Smowton
f0327732ef
Merge pull request #17247 from smowton/smowton/admin/add-spring-component-scan-test
...
Java: add a test exercising Spring component liveness detection
2024-08-20 12:56:26 +01:00
Tamas Vajk
0037ad406d
C#: Adjust buildless source generator folders
2024-08-20 13:43:10 +02:00
Cornelius Riemenschneider
ff242dc6cf
Merge pull request #17252 from github/criemen/pytest-java
...
kotlin: Move integration tests to pytest
2024-08-20 13:17:22 +02:00
Owen Mansel-Chan
38f4f4c724
Merge pull request #17242 from owen-mc/go/mad/convert-sink-4
...
Go: convert sql-injection and nosql-injection sinks to use models-as-data
2024-08-20 12:01:40 +01:00
Tamas Vajk
79bd81fa12
C#: Adjust buildless package restore folders and tests
2024-08-20 12:12:23 +02:00
Cornelius Riemenschneider
932c07a0f4
Address review.
2024-08-20 11:46:28 +02:00
Anders Schack-Mulligen
e73fc94354
Dataflow: Add change note.
2024-08-20 10:12:01 +02:00
Anders Schack-Mulligen
8470e91c16
Legacy Dataflow: Sync.
2024-08-20 10:07:57 +02:00
Anders Schack-Mulligen
4afdb0927e
Dataflow: Remove src/sink grouping feature.
2024-08-20 10:07:36 +02:00
Ed Minnix
49a4318ab1
DRAFT: Go MaD docs first draft (still need to change Select example)
2024-08-20 00:30:16 -04:00
Ed Minnix
0361b5c342
Fix AllocationSizeOverflow expectations
2024-08-19 22:31:29 -04:00
Ed Minnix
bb1cf4f51f
Fix tests
2024-08-19 20:14:23 -04:00
Ed Minnix
e3ffbbe3b7
Fix extensible name in io/fs models
2024-08-19 19:02:07 -04:00
Ed Minnix
442026cc9d
Fix test results
2024-08-19 17:23:32 -04:00
Ed Minnix
2629e09b67
Add io/ioutil and io/fs models
2024-08-19 17:22:46 -04:00
Ed Minnix
a308bdb75d
Modify UnhandledCloseWritableHandle to use post processing
2024-08-19 12:59:34 -04:00
Geoffrey White
4c5c6c6968
Merge pull request #17148 from geoffw0/hardkey
...
Swift: Additional test cases for swift/hardcoded-key
2024-08-19 17:45:34 +01:00
Ed Minnix
5e8185ac4f
Port test to inline expectations test
2024-08-19 12:44:30 -04:00
Ed Minnix
704cd8aee3
Update change note
2024-08-19 12:28:55 -04:00
Edward Minnix III
fc38476e42
Fix models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-19 12:25:55 -04:00
Ed Minnix
f89174a6f3
CI changes (provenance)
2024-08-19 12:25:52 -04:00
Ed Minnix
0f7ad98a23
Change note
2024-08-19 12:25:48 -04:00
Ed Minnix
eb8c785c6b
Fix formatting
2024-08-19 12:25:43 -04:00
Ed Minnix
3f640a99d3
Tests for file models
2024-08-19 12:25:37 -04:00
Ed Minnix
383e27c2bd
Add file sources
2024-08-19 12:25:27 -04:00
Chris Smowton
80e03c3c51
Improve ql/doc style
2024-08-19 16:25:06 +01:00
