Napalys Klicius
|
5e8b1b061f
|
Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2024-11-05 10:29:22 +01:00 |
|
Napalys Klicius
|
7825a46085
|
Merge branch 'github:main' into napalys/matchAll-support
|
2024-11-05 09:31:30 +01:00 |
|
Napalys
|
b239bfabf1
|
Added tests forIncompleteHostnameRegExp and normalizedPaths using matchAll
|
2024-11-05 09:22:26 +01:00 |
|
Paolo Tranquilli
|
87a08fe5fa
|
Merge pull request #17891 from geoffw0/swift6models
Swift: Update models for better Swift 6 compatibility.
|
2024-11-05 08:55:26 +01:00 |
|
Napalys
|
ccee34d6d3
|
Added support for matchAll in CWE-020 including new test cases
|
2024-11-05 08:51:24 +01:00 |
|
Geoffrey White
|
c8c747a110
|
Rust: Add total data flow inconsistencies to rust/summary/summary-statistics.
|
2024-11-04 19:10:44 +00:00 |
|
Geoffrey White
|
30cc55005d
|
Rust: Add rust/diagnostics/data-flow-consistency-counts query for data flow inconsistency counts.
|
2024-11-04 19:09:30 +00:00 |
|
Simon Friis Vindum
|
c7b4e7c30a
|
Rust: Small improvements to data flow
The predicate `ssaDefAssigns` was definitely broken before
|
2024-11-04 20:01:58 +01:00 |
|
Simon Friis Vindum
|
d9636b37b6
|
Rust: Add data flow test with assignment to mutable variable
|
2024-11-04 20:00:36 +01:00 |
|
Geoffrey White
|
91ebc0eb45
|
Rust: Add metadata to the DataFlowConsistency.ql query.
|
2024-11-04 18:53:34 +00:00 |
|
Geoffrey White
|
a645a9e829
|
Rust: Add getInconsistencyCounts predicate to the shared DataFlowImplConsistency.qll, so it's possibly to access inconsistency data as a whole.
|
2024-11-04 18:52:20 +00:00 |
|
Chuan-kai Lin
|
3cdf94e83a
|
Merge pull request #17904 from github/post-release-prep/codeql-cli-2.19.3
Post-release preparation for codeql-cli-2.19.3
|
2024-11-04 10:14:12 -08:00 |
|
Calum Grant
|
397bf7c5e2
|
C++: Fix FPs caused by a syntax error
|
2024-11-04 17:38:16 +00:00 |
|
Calum Grant
|
496efeed7e
|
C++: Add a test for cpp/wrong-number-format-arguments
|
2024-11-04 17:36:23 +00:00 |
|
github-actions[bot]
|
f107d16b4e
|
Post-release preparation for codeql-cli-2.19.3
|
2024-11-04 17:20:08 +00:00 |
|
Kylie Stradley
|
0e94777b13
|
Merge branch 'master' into immutable-actions
|
2024-11-04 11:57:06 -05:00 |
|
Chuan-kai Lin
|
39a67b6e2e
|
Merge pull request #17903 from github/release-prep/2.19.3
Release preparation for version 2.19.3
codeql-cli/v2.19.3
|
2024-11-04 08:42:12 -08:00 |
|
github-actions[bot]
|
cc7b724123
|
Release preparation for version 2.19.3
|
2024-11-04 16:37:28 +00:00 |
|
Kylie Stradley
|
5bf02e73ea
|
Update ql/src/Security/CWE-829/UnpinnedActionsTag.ql
Co-authored-by: Alvaro Muñoz <pwntester@github.com>
|
2024-11-04 11:30:29 -05:00 |
|
Simon Friis Vindum
|
8d59b9289b
|
Rust: Make improvements to data flow based on PR feedback
|
2024-11-04 16:42:05 +01:00 |
|
Geoffrey White
|
5a34c166b7
|
Rust: Remove the workaround in rust/unused-variable.
|
2024-11-04 15:31:43 +00:00 |
|
Simon Friis Vindum
|
2818893010
|
Rust: Refactor AstCfgNode to use a field
Co-authored-by: Tom Hvitved <hvitved@github.com>
|
2024-11-04 15:01:25 +01:00 |
|
Florin Coada
|
7418d8ed24
|
Merge pull request #17832 from github/changedocs/2.19.2
CodeQL 2.19.2 changedocs
|
2024-11-04 13:56:28 +00:00 |
|
Tom Hvitved
|
0aee809697
|
Merge pull request #17899 from hvitved/accept-changes-multi-jobs
Handle matrix jobs in accept changes script
|
2024-11-04 14:54:21 +01:00 |
|
Alvaro Muñoz
|
ae6856ab5a
|
models: add new control check model
|
2024-11-04 14:44:13 +01:00 |
|
Rasmus Wriedt Larsen
|
5f20f1984c
|
expected-changes: Use set constructor
|
2024-11-04 14:14:15 +01:00 |
|
Rasmus Wriedt Larsen
|
8f80c24270
|
Merge pull request #17256 from RasmusWL/js-threat-models
JS: Add support for threat models
|
2024-11-04 14:04:12 +01:00 |
|
Simon Friis Vindum
|
34e8ea17d8
|
Merge pull request #17898 from paldepind/rust-cfg-refactor
Rust: CFG classes are in expression module iff they correspond to exp…
|
2024-11-04 13:01:15 +01:00 |
|
Tom Hvitved
|
95e9d013cc
|
Update expected test output
|
2024-11-04 12:07:06 +01:00 |
|
Tom Hvitved
|
a89c82bf74
|
Handle matrix jobs in accept changes script
|
2024-11-04 11:49:35 +01:00 |
|
Simon Friis Vindum
|
6b25bea2e5
|
Rust: Accept consistency results
|
2024-11-04 11:28:26 +01:00 |
|
Simon Friis Vindum
|
a3c7d5a469
|
Merge branch 'main' into rust-data-flow-consistency
|
2024-11-04 11:10:48 +01:00 |
|
Simon Friis Vindum
|
fb26f7861f
|
Merge pull request #17895 from paldepind/rust-data-flow-consistency-query
Rust: Add data flow consistency queries
|
2024-11-04 11:07:46 +01:00 |
|
Simon Friis Vindum
|
714e2fc2c1
|
Merge branch 'main' into rust-data-flow-consistency-query
|
2024-11-04 10:42:53 +01:00 |
|
Simon Friis Vindum
|
2ae721bd54
|
Merge pull request #17897 from github/redsun82/rust-fix-compilation
Rust: fix semantic merge conflict about semantics
|
2024-11-04 10:35:47 +01:00 |
|
Simon Friis Vindum
|
633bac633c
|
Rust: CFG classes are in expression module iff they correspond to expressions
|
2024-11-04 10:34:08 +01:00 |
|
Simon Friis Vindum
|
7f344fab78
|
Rust: Add data flow consistency queries
|
2024-11-04 10:17:50 +01:00 |
|
Alvaro Muñoz
|
4f62573d17
|
Bump qlpack versions
|
2024-11-04 10:11:52 +01:00 |
|
Alvaro Muñoz
|
55476af179
|
Merge pull request #107 from github/query_if
query: split if expression is always true query
|
2024-11-04 10:11:14 +01:00 |
|
Alvaro Muñoz
|
db6f174b79
|
query: split if expression is always true query
critical - if the if statement contains a known control check
high - otherwise
|
2024-11-04 10:10:47 +01:00 |
|
Paolo Tranquilli
|
6848a22c65
|
Rust: fix semantic merge conflict about semantics
|
2024-11-04 10:04:40 +01:00 |
|
Paolo Tranquilli
|
bde517fcb1
|
Merge pull request #17849 from github/aibaars/single-semantics
Rust: try to speed things up a bit
|
2024-11-04 09:24:26 +01:00 |
|
Tom Hvitved
|
8b8b721788
|
Data flow: Order provenance output by textual representation
|
2024-11-04 08:47:30 +01:00 |
|
Jami Cogswell
|
459d16824e
|
Java: weak crypto: do not report weak hash algorithms
|
2024-11-03 18:22:06 -05:00 |
|
Alvaro Muñoz
|
80f2b24eeb
|
Bump qlpack versions
|
2024-11-03 22:29:50 +01:00 |
|
Alvaro Muñoz
|
ea20e9b337
|
fix: Add versioned python binaries to poisonable steps
|
2024-11-03 22:29:20 +01:00 |
|
Simon Friis Vindum
|
82076ee0b8
|
Rust: Propagate data flow through a few expression types
|
2024-11-03 16:12:59 +01:00 |
|
Simon Friis Vindum
|
2bab29d31b
|
Rust: Add local data flow step tests
|
2024-11-03 16:12:58 +01:00 |
|
Simon Friis Vindum
|
01141ccdc9
|
Rust: Integrate SSA into data flow
|
2024-11-03 16:12:56 +01:00 |
|
Tom Hvitved
|
662a824312
|
Merge pull request #17865 from hvitved/rust/unused-macro-expansion
|
2024-11-03 09:17:14 +01:00 |
|