Nick Rolfe
003d208574
JS: do fewer regexp matches in SensitiveActions
2024-04-23 15:31:38 +01:00
Tom Hvitved
d8d7688f88
C#: Fix another bad join
2024-04-23 15:39:59 +02:00
Paolo Tranquilli
c014cd84f4
Bazel: fix kotlin wrapper version dependency
2024-04-23 15:15:38 +02:00
Paolo Tranquilli
5b143cee96
Kotlin: make wrapper install quietly unless --select is explicit
...
This allows `kotlinc -version` to always produce something parseable.
2024-04-23 15:15:38 +02:00
Alvaro Muñoz
944bd84a58
Add missing spaces
2024-04-23 15:15:16 +02:00
Alvaro Muñoz
16cf60af00
Add double quotes to env var
2024-04-23 15:05:40 +02:00
Paolo Tranquilli
072e2edd34
Merge branch 'main' into redsun82/kotlin
2024-04-23 14:29:33 +02:00
Alvaro Muñoz
6237a8e24c
Update action.yml
2024-04-23 13:27:44 +02:00
Alvaro Muñoz
5cd8d70a9c
Bump qlpack versions
2024-04-23 13:09:06 +02:00
Alvaro Muñoz
858df49012
Generate yaml file
2024-04-23 13:08:27 +02:00
Anders Schack-Mulligen
830b83f653
Dataflow: Use doublyBoundedFastTC.
2024-04-23 13:07:20 +02:00
Alvaro Muñoz
a2ed07ec35
Update scan action
2024-04-23 12:43:23 +02:00
Mathias Vorreiter Pedersen
3592e76269
Merge pull request #16302 from MathiasVP/fieldflowbranchlimit-follow-up-1
...
C++: `fieldFlowBranchLimit` follow-up (1)
2024-04-23 11:35:49 +01:00
Tom Hvitved
6aa4c5c187
C#: Fix a bad join
2024-04-23 11:47:55 +02:00
Michael B. Gale
fb8ee07b43
Merge pull request #16262 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/src/subdir1/golang.org/x/net-0.23.0
2024-04-23 10:44:54 +01:00
Michael B. Gale
4ccff1a630
Merge pull request #16263 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/ninja-sample/src/golang.org/x/net-0.23.0
2024-04-23 10:44:17 +01:00
Michael B. Gale
4b7160d4b2
Merge pull request #16267 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/go-mod-without-version/src/golang.org/x/net-0.23.0
2024-04-23 10:43:43 +01:00
Michael B. Gale
5cce5008a3
Merge pull request #16264 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/src/modules/subdir2/golang.org/x/net-0.23.0
2024-04-23 10:42:53 +01:00
Michael B. Gale
5b6ce56ca2
Merge pull request #16268 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/single-go-mod-not-in-root/src/subdir/golang.org/x/net-0.23.0
2024-04-23 10:42:24 +01:00
Michael B. Gale
2b81b6c323
Merge pull request #16265 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/mixed-layout/src/module/golang.org/x/net-0.23.0
2024-04-23 10:41:50 +01:00
Alvaro Muñoz
f73571a752
fix: fix shell comments
2024-04-23 11:20:52 +02:00
Mathias Vorreiter Pedersen
a39d8b7c7c
C++: Ensure that each node type gets mapped to an instruction by 'getAnInstruction'.
2024-04-23 09:44:30 +01:00
Mathias Vorreiter Pedersen
553c09ada3
Merge pull request #16301 from MathiasVP/proper-coroutine-cfg-support-2
...
C++: Implement proper coroutine support in IR
2024-04-23 09:19:15 +01:00
Anders Schack-Mulligen
b2f09949df
Merge pull request #15599 from aschackmull/dataflow/fieldflowbranchlimit-v2
...
Dataflow: update fieldFlowBranchLimit semantics
2024-04-23 10:08:05 +02:00
Rasmus Wriedt Larsen
1bc085c8f7
Python: Fixup for callGraphConfig
2024-04-23 09:42:35 +02:00
Rasmus Wriedt Larsen
bb00d6919a
Python: Move dataflow TestUtil to importable location
2024-04-23 09:40:59 +02:00
Rasmus Wriedt Larsen
e0e405bb31
Python: replace dataflow-test location in files
2024-04-23 09:40:59 +02:00
Rasmus Wriedt Larsen
ce711f7d2f
Python: Move dataflow tests out of experimental
2024-04-23 09:40:44 +02:00
Rasmus Wriedt Larsen
19974f04c9
Merge pull request #16245 from github/tausbn/python-rename-StrConst-to-StringLiteral
...
Python: Rename `StrConst` to `StringLiteral`
2024-04-23 09:35:24 +02:00
Mathias Vorreiter Pedersen
c1755603a8
Update TranslatedExpr.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-04-23 07:25:25 +01:00
Alvaro Muñoz
4b03282be0
Merge pull request #1 from github/extensionpack
...
Support external workflow extpacks
2024-04-22 23:31:49 +02:00
Alvaro Muñoz
17933cbb54
Bump qlpack versions
2024-04-22 23:30:22 +02:00
Alvaro Muñoz
61976c684e
Lower privilege checks to Jobs
2024-04-22 23:28:58 +02:00
Mathias Vorreiter Pedersen
24cf75a37c
C++: Accept test changes.
2024-04-22 21:38:13 +01:00
Mathias Vorreiter Pedersen
8169e7ce68
C++: Add proper translation of 'co_await' and 'co_yield'.
2024-04-22 21:38:13 +01:00
Mathias Vorreiter Pedersen
8383bc1629
C++: Add getters for the other children of 'co_return' and 'co_yield'.
2024-04-22 21:38:13 +01:00
Jeroen Ketema
35d1a9202b
Merge pull request #16298 from jketema/reuse-val
...
C++: Update expected test results after extractor changes
2024-04-22 21:14:42 +02:00
Paolo Tranquilli
aaa29d8982
Remove unneeded slash in kotlinc.bat
2024-04-22 18:13:55 +02:00
Joe Farebrother
f85ee38e04
Add instance taint steps for requests
2024-04-22 16:03:39 +01:00
Paolo Tranquilli
f685843a52
Merge branch 'main' into redsun82/kotlin
2024-04-22 16:47:56 +02:00
Alvaro Muñoz
ef9583a921
Bump qlpack versions
2024-04-22 16:20:36 +02:00
Alvaro Muñoz
c31e9dde5e
Add EnvPathInjection query
2024-04-22 16:19:56 +02:00
Mathias Vorreiter Pedersen
799c380e5f
Merge pull request #16255 from MathiasVP/fix-more-fps-in-iterator-to-expired-container
...
Fix more FPs in `cpp/iterator-to-expired-container`
2024-04-22 14:25:51 +01:00
Tamas Vajk
f20812d8ad
Code quality improvement
2024-04-22 15:12:01 +02:00
Tamas Vajk
05f3c64172
Fix code review findings
2024-04-22 14:46:24 +02:00
Joe Farebrother
88e3227ed0
Add pyramid models
2024-04-22 13:27:18 +01:00
Taus
81246cd41a
Python: Add missing QLDoc for isUnicode
2024-04-22 12:08:53 +00:00
Taus
bab461ffd1
Python: Add change note
2024-04-22 12:00:09 +00:00
Taus
58eaddf627
Python: Update all .expected files
...
I'm beginning to realise why I didn't do the `toString` overriding way
back when. Thankfully, now that all of our tests are in the same place,
this is actually not a terrible ordeal.
2024-04-22 12:00:09 +00:00
Taus
d51fcd4f2a
Python: Change Str to StringLiteral
...
As far as I can tell, this was the only occurrence of `Str` as a type
throughout the entire library.
2024-04-22 12:00:09 +00:00
