github-actions[bot]
019da8c287
Release preparation for version 2.18.2
2024-08-07 14:02:38 +00:00
Alexander Eyers-Taylor
eea9df894a
Merge pull request #17174 from github/revert-17159-release-prep/2.18.2
...
Revert "Release preparation for version 2.18.2"
2024-08-07 15:00:23 +01:00
Tamas Vajk
0263cc1609
Improve code quality
2024-08-07 15:27:14 +02:00
Alexander Eyers-Taylor
46577b585e
Revert "Release preparation for version 2.18.2"
2024-08-07 14:24:37 +01:00
Alexander Eyers-Taylor
26444cb0cd
Merge pull request #17165 from github/dbartol/csharp-test-hotfix
...
C#: Update expected test output
2024-08-07 14:23:08 +01:00
Alvaro Muñoz
b251c661f8
Bump qlpack versions
2024-08-07 13:46:50 +02:00
Alvaro Muñoz
e4559e19d8
Move Output Clobbering to CWE-074
2024-08-07 13:46:27 +02:00
Alvaro Muñoz
ea9bb36ae0
Bump qlpack versions
2024-08-07 13:21:03 +02:00
Alvaro Muñoz
856077233d
Merge pull request #72 from github/query/output_clobbering
...
feat(queries): Improve Output Clobbering query
2024-08-07 13:19:54 +02:00
Alvaro Muñoz
473251371b
feat(queries): Improve Output Clobbering query
...
Add support for clobbering of `set-output` workflow command
2024-08-07 13:17:36 +02:00
Cornelius Riemenschneider
67331fb810
Accept test output changes.
...
These test expectations change, as the test is now
run in a temp directory that's not located in our checkout.
Previously, `dotnet build` was picking up files from the repository,
like the editor config and the sourcelink (which requires a git repository
in a parent directory).
2024-08-07 12:53:06 +02:00
Cornelius Riemenschneider
59922e5c46
Port C# tests to pytest.
2024-08-07 12:53:05 +02:00
Tom Hvitved
d9ff4ef567
Merge pull request #17155 from hvitved/java/array-ref-bad-join
...
Java: Fix bad join
2024-08-07 12:39:40 +02:00
Paolo Tranquilli
c576a116f5
Bazel: make git_lfs_probe.py try all available endpoints
2024-08-07 12:38:43 +02:00
Owen Mansel-Chan
40282daeb5
Merge pull request #17152 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-08-07 11:04:02 +01:00
Paolo Tranquilli
b63bd2ad14
Bazel: format git_lfs_probe.py
2024-08-07 11:57:35 +02:00
Owen Mansel-Chan
5fe3d17a26
Merge branch 'main' into workflow/coverage/update
2024-08-07 10:52:55 +01:00
Tamás Vajk
42be9e98c8
Merge pull request #16938 from tamasvajk/feature/extract-files-multiple
...
C#: Do not skip extraction of already seen source files
2024-08-07 11:23:48 +02:00
Tamas Vajk
2a2b371244
Add change note
2024-08-07 11:15:10 +02:00
Tamas Vajk
7388c6db24
Downgrade buildless TSP warnings to notes
2024-08-07 11:14:16 +02:00
Tamas Vajk
139e09d5d3
C#: Add diagnostic query indicating low database quality
2024-08-07 10:49:12 +02:00
erik-krogh
bef4fe627d
make sure the new identifiers have end-locations
2024-08-07 10:25:22 +02:00
Joe Farebrother
62c2fe6b17
Merge pull request #16933 from joefarebrother/python-cookie-concept-promote
...
Python: Promote the insecure cookie query from experimental
2024-08-07 09:06:05 +01:00
github-actions[bot]
d88b25c243
Add changed framework coverage reports
2024-08-07 00:18:15 +00:00
Joe Farebrother
24df54804a
Review suggestion - Add link to qldoc
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2024-08-06 22:59:14 +01:00
Alvaro Muñoz
c442f1b96b
Bump qlpack versions
2024-08-06 23:30:47 +02:00
Alvaro Muñoz
ff41cda8fc
Merge pull request #71 from github/query/secret_handling
...
feat(query): New queries for incorrect secrets handling
2024-08-06 23:29:41 +02:00
Alvaro Muñoz
6842babd16
feat(query): New queries for incorrect secrets handling
...
ExcessiveSecretsExposure: Reports when all secrets are passed to the
workflow runner since that violates the principle of least privelege.
UnmaskedSecretExposure: Reports when secrets are derived from a JSON
secret since they wont get masked by the workflow runner
2024-08-06 23:08:52 +02:00
erik-krogh
b8187ed294
support arbitary export specifiers
2024-08-06 20:45:57 +02:00
erik-krogh
5f7f37f6c8
support arbitary import specifiers
2024-08-06 20:45:53 +02:00
Dave Bartolomeo
e5911c90d4
Merge branch 'codeql-cli-2.18.2' into dbartol/csharp-test-hotfix
2024-08-06 13:32:08 -04:00
Tom Hvitved
78cd3d8332
C#: Update expected test output
2024-08-06 13:29:43 -04:00
Dave Bartolomeo
e222b49258
Merge pull request #17160 from hvitved/csharp/update-expected
...
C#: Update expected test output
2024-08-06 13:27:49 -04:00
Dave Bartolomeo
a5d671a1ca
Merge pull request #17163 from github/dbartol/cpp-test-hotfix
...
C++: Accept test changes caused by new CLI version.
2024-08-06 12:56:37 -04:00
Geoffrey White
d704fd9682
C++: Accept test changes caused by new CLI version.
2024-08-06 12:27:49 -04:00
Dave Bartolomeo
b2d20f1fed
Merge pull request #17161 from geoffw0/madfix
...
C++: Accept test changes caused by new CLI version.
2024-08-06 12:25:27 -04:00
Angela P Wen
1f37662e3b
Merge pull request #17158 from github/angelapwen/update-codeql-docs
...
Docs: remove `ubuntu-18.04`, indicate Swift requires macOS
2024-08-06 18:17:15 +02:00
Cornelius Riemenschneider
b4db86491d
Merge remote-tracking branch 'origin/main' into criemen/pytest-go
2024-08-06 18:09:55 +02:00
Cornelius Riemenschneider
c88ed68766
Merge pull request #17151 from github/criemen/pytest-ruby
...
Ruby: Port integration tests to pytest.
2024-08-06 18:09:34 +02:00
Cornelius Riemenschneider
46cf779062
Address review.
2024-08-06 18:08:25 +02:00
Geoffrey White
bf66a787ab
C++: Accept test changes caused by new CLI version.
2024-08-06 16:45:48 +01:00
Cornelius Riemenschneider
ffde68aaec
Merge remote-tracking branch 'origin/main' into criemen/pytest-go
2024-08-06 17:03:16 +02:00
Cornelius Riemenschneider
def662d641
Merge branch 'main' into criemen/pytest-ruby
2024-08-06 16:41:23 +02:00
Tom Hvitved
00d447ba4b
C#: Update expected test output
2024-08-06 15:43:08 +02:00
Alexander Eyers-Taylor
01ff7e1f26
Merge pull request #17159 from github/release-prep/2.18.2
...
Release preparation for version 2.18.2
2024-08-06 13:59:14 +01:00
Owen Mansel-Chan
f0d1740ff8
Update text expectations
2024-08-06 13:48:45 +01:00
github-actions[bot]
c14ba0e4bd
Release preparation for version 2.18.2
2024-08-06 12:46:15 +00:00
Angela P Wen
4489749ce4
Docs: indicate Swift support requires macOS
2024-08-06 14:33:03 +02:00
Angela P Wen
14977a7917
Docs: remove deprecated ubuntu-18.04
2024-08-06 14:30:40 +02:00
Asger F
c66000d2fa
Merge pull request #17136 from asgerf/js/shared-dataflow-bump
...
JS: Merge 'main' into shared dataflow branch
2024-08-06 14:14:47 +02:00
