Michael Nebel
e4d41194b4
C#: Include store steps into readonly properties.
2024-02-20 15:55:19 +01:00
Michael Nebel
3112bf4682
C#: Add some test property inititialization test cases and update expected output.
2024-02-20 15:55:19 +01:00
Geoffrey White
5787dcc82d
C++: Make getStaticCallTarget() return a DataFlowCallable.
2024-02-20 14:49:51 +00:00
Geoffrey White
356214c11b
C++: Implement SummaryReturnNode.
2024-02-20 14:48:02 +00:00
Geoffrey White
5683092d6a
C++: Implement SummaryParameterNode.
2024-02-20 14:48:02 +00:00
Geoffrey White
1ace9ee50f
C++: Create a proper class for DataFlowCallable, that includes summarized callables.
2024-02-20 14:48:02 +00:00
Geoffrey White
e1a5a84253
C++: Create a proper class for DataFlowCall, that includes summarized callables.
2024-02-20 14:48:02 +00:00
github-actions[bot]
6d061fbc35
Release preparation for version 2.16.3
2024-02-20 14:26:23 +00:00
Michael Nebel
ed3dba8334
Merge pull request #15625 from michaelnebel/csharp/primaryconstructorinitializer
...
C# 12: Primary constructor inititalizers.
2024-02-20 15:12:19 +01:00
Max Schaefer
75f66c2191
Add four more sink types.
2024-02-20 13:48:20 +00:00
Anders Schack-Mulligen
5a348a5048
Dataflow: SimpleGlobal / Typetracker perf fix.
2024-02-20 14:40:28 +01:00
Tamás Vajk
029db218fe
Merge pull request #15650 from tamasvajk/buildless/fallback-nuget-install
...
C#: Add fallback logic to `nuget install`
2024-02-20 14:26:44 +01:00
Owen Mansel-Chan
e6f9ef5042
Merge pull request #15643 from owen-mc/java/sensitive-logging
...
Java: Sensitive Logging: Simplify definition of source and improve QLDoc
2024-02-20 13:24:23 +00:00
Alex Ford
5b46256fdb
Ruby: remove customizing-library-models-for-ruby.rst
2024-02-20 13:12:23 +00:00
Asger F
29ffeb6da5
JS: Fix qldoc
2024-02-20 14:00:32 +01:00
Paolo Tranquilli
2cc762b85a
Merge branch 'main' into redsun82/bzlmod
2024-02-20 13:55:57 +01:00
Michael B. Gale
ea676469bb
Merge pull request #15202 from github/mbg/go/1.22
...
Go: Update workflows and expected test results for Go 1.22
2024-02-20 12:32:57 +00:00
Alvaro Muñoz
c84e64e76c
Merge pull request #16 from GitHubSecurityLab/model-gen-queries
...
feat(model-generation): Add more model generation queries
2024-02-20 12:05:12 +01:00
Alvaro Muñoz
010d7df71d
feat(reusable-workflow-models): Reusable workflow MaD
...
Add support to define sources/sinks/summaries for Reusable Workflows as
MaD entries.
2024-02-20 11:58:54 +01:00
Michael Nebel
f246272b5f
C#: Code quality improvements.
2024-02-20 11:48:01 +01:00
Chris Smowton
2e479def89
Merge pull request #15445 from smowton/smowton/admin/java-buildless-classpath-ordering-tests
...
Java: test changes for making buildless' classpath ordering deterministic
2024-02-20 10:03:03 +00:00
Alvaro Muñoz
1d582a4c4d
feat(model-generation): Add more model generation queries
...
Add new queries for finding reusable workflows that behave as summaries, sources or sinks.
Add new query for finding composite actions that behave as sinks.
Add `github.event.inputs` context to the regular expression matching input var accesses.
2024-02-20 10:50:02 +01:00
Tamás Vajk
e257003641
Merge pull request #15660 from tamasvajk/feature/code-quality
...
C#: Use `nameof` in nullability attributes
2024-02-20 10:47:52 +01:00
Rasmus Lerchedahl Petersen
22e72d2fed
python: Move the rewrite out to Scope.qll
2024-02-20 10:39:29 +01:00
Mathias Vorreiter Pedersen
66622748d9
Merge pull request #15658 from jketema/destructors6a
...
C++: Add more range-based for-loop IR tests
2024-02-20 10:26:23 +01:00
Rasmus Lerchedahl Petersen
de727bf1b5
Revert "python: remove a use of points-to"
...
This reverts commit 5cb71ce7e5
2024-02-20 10:23:31 +01:00
Tamas Vajk
d3ba33d3a8
Code quality improvements
2024-02-20 10:22:08 +01:00
Tamas Vajk
b3f5beb076
C#: Use nameof in nullability attributes
2024-02-20 10:05:39 +01:00
Jeroen Ketema
7ec95fba6d
C++: Add more range-based for-loop IR tests
2024-02-20 09:22:13 +01:00
Chris Smowton
83509ce1f7
Test changes
2024-02-19 19:06:37 +00:00
Paolo Tranquilli
ec3cc6376f
Merge branch 'main' into redsun82/bzlmod
2024-02-19 16:42:08 +01:00
Jeroen Ketema
2becb3043e
Merge pull request #15638 from jketema/destructors5
...
C++: Support C++20 range-based for initializers
2024-02-19 16:22:23 +01:00
Max Schaefer
f4c6cf335b
Merge pull request #15651 from github/max-schaefer/release-automodel-query-pack
...
Automodel: Release query pack.
2024-02-19 14:55:49 +00:00
Tony Torralba
1704bfe2bf
Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification
...
Go: Promote `go/missing-jwt-signature-check` from experimental
2024-02-19 15:35:44 +01:00
Paolo Tranquilli
0787cc5e51
Merge branch 'main' into redsun82/bzlmod
2024-02-19 15:07:42 +01:00
Paolo Tranquilli
164250186a
Merge pull request #15593 from github/redsun82/swift-prebuilt-update
...
Swift: update swift prebuilt package
2024-02-19 15:05:13 +01:00
Paolo Tranquilli
434fd73823
Merge pull request #15653 from github/redsun82/swift-remove-test-sdk
...
Swift: remove test sdk
2024-02-19 15:04:13 +01:00
Paolo Tranquilli
f842eee784
Swift: use includes in picosha2
2024-02-19 14:06:18 +01:00
Paolo Tranquilli
d0e169ebda
Merge branch 'main' into redsun82/bzlmod
2024-02-19 14:05:43 +01:00
Anders Schack-Mulligen
66010b5c96
Java: Switch helper flow from Global to SimpleGlobal in StaticInitializationVectorQuery.
2024-02-19 14:04:43 +01:00
Anders Schack-Mulligen
2fa8c2f992
Merge pull request #15634 from aschackmull/dataflow/simpleglobal-fixreads
...
Dataflow: Bugfix for field reads in SimpleGlobal.
2024-02-19 14:02:38 +01:00
Asger F
c324b2aed8
JS: Refactor
2024-02-19 13:59:49 +01:00
Asger F
eb7d0244c2
JS: Global names don't have to be defined in externs
2024-02-19 13:59:49 +01:00
Asger F
493b37774f
JS: More precise isFunctionSource
2024-02-19 13:59:49 +01:00
Asger F
6d597bea0d
JS: Refactor
2024-02-19 13:59:49 +01:00
Asger F
8a5b907912
JS: Handle wrapper functions more gracefully
2024-02-19 13:59:48 +01:00
Asger F
d96f29d6c2
JS: Disallow return steps in getASinkNode
2024-02-19 13:59:48 +01:00
Asger F
51bed86778
Update EndpointNaming.expected
2024-02-19 13:59:46 +01:00
Asger F
29258ad8c2
WIP new aliasing rule
2024-02-19 13:59:15 +01:00
Asger F
4ef1ac9250
JS: Accept bad test output
2024-02-19 13:59:12 +01:00
