Rasmus Wriedt Larsen
|
1de2943a9b
|
Merge pull request #16940 from RasmusWL/rasmuswl/BuiltinModuleExtractable
Python: Handle diagnostics writing for `BuiltinModuleExtractable`
|
2024-07-12 14:46:30 +02:00 |
|
Tom Hvitved
|
9263977329
|
Ruby: Adopt shared SSA data-flow integration
|
2024-07-12 14:23:24 +02:00 |
|
Tom Hvitved
|
8a9f0bf433
|
Merge pull request #16966 from hvitved/ssa/reduce-caching
SSA: Reduce caching in data-flow integration layer
|
2024-07-12 14:22:49 +02:00 |
|
Paul Hodgkinson
|
c9af53f050
|
Merge branch 'main' into aegilops/polyfill-io-compromised-script
|
2024-07-12 12:53:44 +01:00 |
|
aegilops
|
61df4d2f04
|
Merge branch 'aegilops/polyfill-io-compromised-script' of https://github.com/aegilops/codeql into aegilops/polyfill-io-compromised-script
|
2024-07-12 12:49:18 +01:00 |
|
aegilops
|
00d91dc6ba
|
Created guide on customizing these queries, and referenced it in the query help
|
2024-07-12 12:49:09 +01:00 |
|
aegilops
|
040f948e65
|
Added a note that SRI can be considered for some dynamic services
|
2024-07-12 12:48:36 +01:00 |
|
Tamás Vajk
|
0839742daa
|
Merge pull request #16968 from tamasvajk/feature/buildless-deterministic-file-order-2
C#: Order syntax trees before creating compilation
|
2024-07-12 13:47:21 +02:00 |
|
Rasmus Wriedt Larsen
|
354394d4c2
|
Python: Don't use fake locations in diagnostics
Some of the internal tooling would not be too happy about this :D
|
2024-07-12 13:36:41 +02:00 |
|
Paul Hodgkinson
|
3f37fe6add
|
Apply suggestions from code review - docs and wording
Docs suggestions accepted, thank you 🙏
Co-authored-by: Felicity Chapman <felicitymay@github.com>
|
2024-07-12 11:48:39 +01:00 |
|
Alvaro Muñoz
|
417d5a403e
|
Bump qlpack versions
|
2024-07-12 12:46:03 +02:00 |
|
Alvaro Muñoz
|
a1787596d2
|
feat(tests): Update tests
|
2024-07-12 12:45:19 +02:00 |
|
Alvaro Muñoz
|
e0a075da57
|
feat(dataflow): Flow through bash assigments on artifact to GH env/output
|
2024-07-12 12:45:06 +02:00 |
|
Alvaro Muñoz
|
5785a21d56
|
feat(queries): Env-var injection
Enable Uses sinks for envvar injection
|
2024-07-12 12:44:25 +02:00 |
|
Alvaro Muñoz
|
f623f73f16
|
feat(models): Add dotenv models
Envvar-injection sinks
|
2024-07-12 12:43:25 +02:00 |
|
Mathias Vorreiter Pedersen
|
f6627cc092
|
Merge pull request #16969 from MathiasVP/add-missing-underlying-type
C++: Strip specifiers and typedefs when finding iterator parameter for string taint function
|
2024-07-12 11:35:52 +01:00 |
|
Alvaro Muñoz
|
8289bf97b9
|
feat(models): Add support for artifact to step output
|
2024-07-12 11:10:01 +02:00 |
|
Tom Hvitved
|
04f173d14e
|
SSA: Reduce caching in data-flow integration layer
|
2024-07-12 11:04:03 +02:00 |
|
Mathias Vorreiter Pedersen
|
7a2b170da2
|
C++: Accept test changes.
|
2024-07-12 09:54:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
813f08ef57
|
C++: Strip away specifiers and typedefs when finding iterator parameters for a string taint function.
|
2024-07-12 09:54:04 +01:00 |
|
Alvaro Muñoz
|
29d2b287c9
|
tests: Organize tests
|
2024-07-12 10:14:39 +02:00 |
|
Alvaro Muñoz
|
c5d31ce08c
|
fix(refactor): Add comments and rename predicates
|
2024-07-12 10:13:49 +02:00 |
|
Tamas Vajk
|
5a41b2c5fb
|
C#: Order syntax trees before creating compilation
|
2024-07-12 10:12:20 +02:00 |
|
Tamas Vajk
|
d689ab0916
|
Revert "C#: Order files in buildless extraction"
This reverts commit ccf56a21c2.
|
2024-07-12 10:11:13 +02:00 |
|
Alvaro Muñoz
|
3f8a791b2e
|
fix(queries): Improve Argument Injection query
Add GITHUB_HEAD_REF as a source
|
2024-07-11 22:59:20 +02:00 |
|
Alvaro Muñoz
|
89024ad604
|
fix(models): Reuse command delimiter regexps
|
2024-07-11 22:58:20 +02:00 |
|
Jami Cogswell
|
6b497da15f
|
Java: fix line number changes in tests
|
2024-07-11 15:33:09 -04:00 |
|
Jami Cogswell
|
ab9a6faaf3
|
Java: add change note
|
2024-07-11 15:10:11 -04:00 |
|
Jami Cogswell
|
77a8ba934c
|
Java: add path-injection sink for hudson.FilePath.exists()
|
2024-07-11 15:03:40 -04:00 |
|
Jami Cogswell
|
744a1a9b72
|
Java: fix line number changes in tests
|
2024-07-11 14:07:23 -04:00 |
|
Jami Cogswell
|
5cf05ec863
|
Java: add change note
|
2024-07-11 13:40:50 -04:00 |
|
Jami Cogswell
|
4a1497f367
|
Java: add IOUtils.toByteArray(InputStream) summary
|
2024-07-11 13:33:08 -04:00 |
|
Mathias Vorreiter Pedersen
|
1a2b4a30bb
|
Merge pull request #16939 from geoffw0/docsforautofix
C++: Assorted minor doc improvements
|
2024-07-11 18:30:45 +01:00 |
|
Calum Grant
|
24914efcb8
|
Merge pull request #16956 from github/calumgrant/cpp20-array-sizes
C++: Test C++20 implicit array sizes.
|
2024-07-11 17:44:08 +01:00 |
|
Calum Grant
|
13c25a494f
|
C++: Move change notes to correct location
|
2024-07-11 16:49:17 +01:00 |
|
Geoffrey White
|
bf47574796
|
Merge branch 'main' into docsforautofix
|
2024-07-11 16:42:27 +01:00 |
|
Ian Lynagh
|
5c97a5f667
|
Kotlin: Kotlin support is now out of beta, and generally available
|
2024-07-11 16:11:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
a2a065c04e
|
Merge pull request #16962 from geoffw0/ga-note
Swift: Add GA change note.
|
2024-07-11 16:04:19 +01:00 |
|
Geoffrey White
|
f5bfdbf5ef
|
Swift: Fix change note file.
|
2024-07-11 16:01:52 +01:00 |
|
Tom Hvitved
|
0459422a6c
|
C#: Restrict multi-body dataflow dispatch based on file-system distance
|
2024-07-11 16:52:20 +02:00 |
|
Tom Hvitved
|
35bf990f23
|
C#: Add data flow test for multi-body dispatch
|
2024-07-11 16:52:18 +02:00 |
|
Tom Hvitved
|
9794269550
|
Merge pull request #16952 from hvitved/ssa/barrier-guards-param-mod
SSA: Make barrier guards a parameterized module
|
2024-07-11 16:46:02 +02:00 |
|
Geoffrey White
|
e5761d6524
|
Swift: Add GA change note.
|
2024-07-11 15:36:28 +01:00 |
|
Rasmus Wriedt Larsen
|
f41d2a896c
|
Merge pull request #16771 from porcupineyhairs/js2py
Python : Arbitrary code execution due to Js2Py
|
2024-07-11 15:31:57 +02:00 |
|
Mathias Vorreiter Pedersen
|
64513fb6c2
|
C++: Add change note.
|
2024-07-11 14:26:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
8012f3b2f7
|
C++: Increase the precision of 'cpp/iterator-to-expired-container' to high.
|
2024-07-11 14:26:05 +01:00 |
|
Joe Farebrother
|
8152ec7472
|
Merge pull request #16696 from joefarebrother/python-cookie-write-headers
Python: Model CookieWrites from HeaderWrites
|
2024-07-11 14:25:54 +01:00 |
|
Angela P Wen
|
0b6714e06f
|
Merge pull request #16954 from github/angelapwen/remove-ci-workaround
Remove CI workaround for `DatabaseQualityDiagnostics.ql`
|
2024-07-11 15:21:31 +02:00 |
|
Calum Grant
|
c6fb50095b
|
C++: Change note and autoformat
|
2024-07-11 14:21:09 +01:00 |
|
Rasmus Wriedt Larsen
|
5ecde387af
|
Python: Fix .expected
|
2024-07-11 14:42:26 +02:00 |
|