Tamas Vajk
2a2b371244
Add change note
2024-08-07 11:15:10 +02:00
Tamas Vajk
7388c6db24
Downgrade buildless TSP warnings to notes
2024-08-07 11:14:16 +02:00
Tamas Vajk
139e09d5d3
C#: Add diagnostic query indicating low database quality
2024-08-07 10:49:12 +02:00
erik-krogh
bef4fe627d
make sure the new identifiers have end-locations
2024-08-07 10:25:22 +02:00
Joe Farebrother
62c2fe6b17
Merge pull request #16933 from joefarebrother/python-cookie-concept-promote
...
Python: Promote the insecure cookie query from experimental
2024-08-07 09:06:05 +01:00
github-actions[bot]
d88b25c243
Add changed framework coverage reports
2024-08-07 00:18:15 +00:00
Joe Farebrother
24df54804a
Review suggestion - Add link to qldoc
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2024-08-06 22:59:14 +01:00
Alvaro Muñoz
c442f1b96b
Bump qlpack versions
2024-08-06 23:30:47 +02:00
Alvaro Muñoz
ff41cda8fc
Merge pull request #71 from github/query/secret_handling
...
feat(query): New queries for incorrect secrets handling
2024-08-06 23:29:41 +02:00
Alvaro Muñoz
6842babd16
feat(query): New queries for incorrect secrets handling
...
ExcessiveSecretsExposure: Reports when all secrets are passed to the
workflow runner since that violates the principle of least privelege.
UnmaskedSecretExposure: Reports when secrets are derived from a JSON
secret since they wont get masked by the workflow runner
2024-08-06 23:08:52 +02:00
erik-krogh
b8187ed294
support arbitary export specifiers
2024-08-06 20:45:57 +02:00
erik-krogh
5f7f37f6c8
support arbitary import specifiers
2024-08-06 20:45:53 +02:00
Dave Bartolomeo
e5911c90d4
Merge branch 'codeql-cli-2.18.2' into dbartol/csharp-test-hotfix
2024-08-06 13:32:08 -04:00
Tom Hvitved
78cd3d8332
C#: Update expected test output
2024-08-06 13:29:43 -04:00
Dave Bartolomeo
e222b49258
Merge pull request #17160 from hvitved/csharp/update-expected
...
C#: Update expected test output
2024-08-06 13:27:49 -04:00
Dave Bartolomeo
a5d671a1ca
Merge pull request #17163 from github/dbartol/cpp-test-hotfix
...
C++: Accept test changes caused by new CLI version.
2024-08-06 12:56:37 -04:00
Geoffrey White
d704fd9682
C++: Accept test changes caused by new CLI version.
2024-08-06 12:27:49 -04:00
Dave Bartolomeo
b2d20f1fed
Merge pull request #17161 from geoffw0/madfix
...
C++: Accept test changes caused by new CLI version.
2024-08-06 12:25:27 -04:00
Angela P Wen
1f37662e3b
Merge pull request #17158 from github/angelapwen/update-codeql-docs
...
Docs: remove `ubuntu-18.04`, indicate Swift requires macOS
2024-08-06 18:17:15 +02:00
Cornelius Riemenschneider
b4db86491d
Merge remote-tracking branch 'origin/main' into criemen/pytest-go
2024-08-06 18:09:55 +02:00
Cornelius Riemenschneider
c88ed68766
Merge pull request #17151 from github/criemen/pytest-ruby
...
Ruby: Port integration tests to pytest.
2024-08-06 18:09:34 +02:00
Cornelius Riemenschneider
46cf779062
Address review.
2024-08-06 18:08:25 +02:00
Geoffrey White
bf66a787ab
C++: Accept test changes caused by new CLI version.
2024-08-06 16:45:48 +01:00
Cornelius Riemenschneider
ffde68aaec
Merge remote-tracking branch 'origin/main' into criemen/pytest-go
2024-08-06 17:03:16 +02:00
Cornelius Riemenschneider
def662d641
Merge branch 'main' into criemen/pytest-ruby
2024-08-06 16:41:23 +02:00
Tom Hvitved
00d447ba4b
C#: Update expected test output
2024-08-06 15:43:08 +02:00
Alexander Eyers-Taylor
01ff7e1f26
Merge pull request #17159 from github/release-prep/2.18.2
...
Release preparation for version 2.18.2
2024-08-06 13:59:14 +01:00
Owen Mansel-Chan
f0d1740ff8
Update text expectations
2024-08-06 13:48:45 +01:00
github-actions[bot]
c14ba0e4bd
Release preparation for version 2.18.2
2024-08-06 12:46:15 +00:00
Angela P Wen
4489749ce4
Docs: indicate Swift support requires macOS
2024-08-06 14:33:03 +02:00
Angela P Wen
14977a7917
Docs: remove deprecated ubuntu-18.04
2024-08-06 14:30:40 +02:00
Asger F
c66000d2fa
Merge pull request #17136 from asgerf/js/shared-dataflow-bump
...
JS: Merge 'main' into shared dataflow branch
2024-08-06 14:14:47 +02:00
Owen Mansel-Chan
572c773345
Change provenance for MaD models that use package grouping
2024-08-06 13:13:39 +01:00
Dave Bartolomeo
32b3924548
Merge pull request #17156 from hvitved/ruby/update-expected
2024-08-06 08:07:07 -04:00
Tom Hvitved
0f1b5327ef
Ruby: Update expected test output
2024-08-06 13:58:05 +02:00
Tom Hvitved
a7410e4a16
Java: Fix bad join
...
Before
```
[2024-08-06 10:37:59] Evaluated non-recursive predicate BoundingChecks::arrayReference/1#754911ba@0628dahn in 20981ms (size: 2009682526).
Evaluated relational algebra for predicate BoundingChecks::arrayReference/1#754911ba@0628dahn with tuple counts:
94480 ~0% {2} r1 = SCAN `Expr::ArrayAccess.getArray/0#dispred#b90c658a` OUTPUT In.1, In.0
32 ~0% {2} r2 = JOIN r1 WITH `Expr::MethodCall.getMethod/0#dispred#41989dc9` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
1013 ~1% {2} | JOIN WITH `Expr::MethodCall.getMethod/0#dispred#41989dc9_10#join_rhs` ON FIRST 1 OUTPUT Lhs.1, Rhs.1
92091 ~4% {2} r3 = JOIN r1 WITH variableBinding ON FIRST 1 OUTPUT Rhs.1, Lhs.1
2009681513 ~0% {2} | JOIN WITH variableBinding_10#join_rhs ON FIRST 1 OUTPUT Lhs.1, Rhs.1
2009682526 ~0% {2} r4 = r2 UNION r3
return r4
[2024-08-06 10:38:02] Evaluated non-recursive predicate BoundingChecks::lessthanLength/1#48b5e1b7@2885308n in 0ms (size: 108).
Evaluated relational algebra for predicate BoundingChecks::lessthanLength/1#48b5e1b7@2885308n with tuple counts:
1518 ~0% {2} r1 = JOIN `Expr::ComparisonExpr.isStrict/0#dispred#fd8c6ddb` WITH `Expr::ComparisonExpr.getGreaterOperand/0#dispred#e8df4b14` ON FIRST 1 OUTPUT Rhs.1, Lhs.0
455 ~2% {2} | JOIN WITH Expr::FieldAccess#2b664c37 ON FIRST 1 OUTPUT Lhs.1, Lhs.0
455 ~1% {3} | JOIN WITH `Expr::ComparisonExpr.getLesserOperand/0#dispred#d7744bc2` ON FIRST 1 OUTPUT Lhs.1, Lhs.0, Rhs.1
455 ~0% {5} | JOIN WITH `Expr::FieldAccess.getField/0#dispred#29ef4aa0` ON FIRST 1 OUTPUT Rhs.1, _, Lhs.1, Lhs.0, Lhs.2
455 ~0% {5} | REWRITE WITH Out.1 := "length"
116 ~0% {3} | JOIN WITH `Element::Element.hasName/1#dispred#8acbbbde` ON FIRST 2 OUTPUT Lhs.4, Lhs.2, Lhs.3
93 ~0% {3} | JOIN WITH variableBinding ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Rhs.1
93 ~1% {3} | JOIN WITH `Expr::VarAccess.getQualifier/0#dispred#2b0f1cd1` ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Rhs.1
484 ~2% {3} | JOIN WITH variableBinding_10#join_rhs ON FIRST 1 OUTPUT Lhs.1, Rhs.1, Lhs.2
277 ~3% {2} | JOIN WITH `BoundingChecks::conditionHolds/2#fa0354b9#bb` ON FIRST 2 OUTPUT Lhs.1, Lhs.2
166 ~5% {2} | JOIN WITH `Expr::ArrayAccess.getIndexExpr/0#dispred#345f6cf4_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
110 ~0% {1} | JOIN WITH `BoundingChecks::arrayReference/1#754911ba` ON FIRST 2 OUTPUT Lhs.0
return r1
```
After
```
[2024-08-06 13:29:50] Evaluated non-recursive predicate BoundingChecks::lengthAccess/2#54b10eff@719e68tb in 0ms (size: 309).
Evaluated relational algebra for predicate BoundingChecks::lengthAccess/2#54b10eff@719e68tb with tuple counts:
6241 ~0% {2} r1 = JOIN `BoundingChecks::getAnAccess/1#152ad44e_10#join_rhs` WITH `Expr::VarAccess.getQualifier/0#dispred#2b0f1cd1_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
6240 ~0% {4} | JOIN WITH `Expr::FieldAccess.getField/0#dispred#29ef4aa0` ON FIRST 1 OUTPUT Rhs.1, _, Lhs.1, Lhs.0
6240 ~0% {4} | REWRITE WITH Out.1 := "length"
309 ~2% {2} | JOIN WITH `Element::Element.hasName/1#dispred#8acbbbde` ON FIRST 2 OUTPUT Lhs.3, Lhs.2
return r1
[2024-08-06 13:29:50] Evaluated non-recursive predicate BoundingChecks::lessthanLength/1#48b5e1b7@0fcac509 in 1ms (size: 108).
Evaluated relational algebra for predicate BoundingChecks::lessthanLength/1#48b5e1b7@0fcac509 with tuple counts:
94480 ~0% {3} r1 = JOIN `Expr::ArrayAccess.getArray/0#dispred#b90c658a` WITH `Expr::ArrayAccess.getIndexExpr/0#dispred#345f6cf4` ON FIRST 1 OUTPUT Rhs.1, Lhs.0, Lhs.1
648 ~4% {4} | JOIN WITH variableBinding ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Lhs.0, Rhs.1
621 ~1% {4} | JOIN WITH `BoundingChecks::getAnAccess/1#152ad44e_10#join_rhs` ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Lhs.3, Rhs.1
344 ~0% {4} | JOIN WITH `BoundingChecks::conditionHolds/2#fa0354b9#bb_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2, Lhs.3
341 ~0% {4} | JOIN WITH `Expr::ComparisonExpr.isStrict/0#dispred#fd8c6ddb` ON FIRST 1 OUTPUT Lhs.0, Lhs.1, Lhs.2, Lhs.3
341 ~0% {5} | JOIN WITH `Expr::ComparisonExpr.getGreaterOperand/0#dispred#e8df4b14` ON FIRST 1 OUTPUT Rhs.1, Lhs.3, Lhs.1, Lhs.2, Lhs.0
110 ~2% {3} | JOIN WITH `BoundingChecks::lengthAccess/2#54b10eff` ON FIRST 2 OUTPUT Lhs.4, Lhs.2, Lhs.3
110 ~0% {3} | JOIN WITH `Expr::ComparisonExpr.getLesserOperand/0#dispred#d7744bc2` ON FIRST 1 OUTPUT Rhs.1, Lhs.2, Lhs.1
110 ~0% {1} | JOIN WITH variableBinding ON FIRST 2 OUTPUT Lhs.2
return r1
```
2024-08-06 13:30:19 +02:00
Cornelius Riemenschneider
2377546240
Merge pull request #17150 from github/criemen/upgrade-rules-rust
...
Bazel: Upgrade rules_rust.
2024-08-06 12:53:07 +02:00
Alvaro Muñoz
9f79e51e89
Bump qlpack versions
2024-08-06 12:46:28 +02:00
Alvaro Muñoz
76210f53c8
Merge pull request #69 from github/improve_cache_poisoning
...
Improve Cache Poisoning Query
2024-08-06 12:45:51 +02:00
Asger F
2d814428d6
JS: Update expected output with provenance
2024-08-06 12:45:08 +02:00
Asger F
0a143a5f52
JS: Do not include type in path explanation
2024-08-06 12:45:07 +02:00
Asger F
1a532dac29
JS: Update VariableCapture instantiation after merge
2024-08-06 12:45:06 +02:00
Asger F
c8bbad6c4d
Merge branch 'main' into js/shared-dataflow-merge-main
2024-08-06 12:43:13 +02:00
Cornelius Riemenschneider
4e013af530
Merge branch 'main' into criemen/upgrade-rules-rust
2024-08-06 12:40:39 +02:00
Alvaro Muñoz
d18179850d
Split Cache Poisoning queries in 3
...
Split them into 3 queries depending of how the cache can be poisoned:
- control of cached files
- execution of controlled code
- code injection
Remove `setup-XXX` actions from CacheWriting class since the cached
files are not in the CWD
2024-08-06 12:04:34 +02:00
Rasmus Wriedt Larsen
d50898e114
Python: Downgrade packaging for Python 3.7 support
2024-08-06 11:15:48 +02:00
Alvaro Muñoz
fbc2e1e7e8
Remove caching actions that cache files outside of the CWD
2024-08-06 10:47:12 +02:00
Joe Farebrother
e47d4ccb79
Merge pull request #17002 from Flying-Tom/add-get-response
...
Ruby: Add get_response for Net::HTTP
2024-08-06 09:44:21 +01:00
Tom Hvitved
87c5627024
Merge pull request #16937 from hvitved/ruby/ssa-integration
...
Ruby: Adopt shared SSA data-flow integration
2024-08-06 10:39:41 +02:00
Paolo Tranquilli
79740ed72b
Merge pull request #17145 from github/redsun82/go
...
Go/Bazel: fix gazelle invocation to use bundled bazel go
2024-08-06 10:36:40 +02:00
