Michael Nebel
|
431586bb70
|
C#: Make the same folder structure for BMN tests as used for traced extractor tests.
|
2025-03-07 13:22:32 +01:00 |
|
Simon Friis Vindum
|
494f914070
|
Rust: Add regular expression injection query
|
2025-03-07 12:37:30 +01:00 |
|
Geoffrey White
|
abe14babb1
|
Rust: Clean up the existing macro cases for the unusedentities test.
|
2025-03-07 11:24:42 +00:00 |
|
Anders Schack-Mulligen
|
3508ca89e6
|
Java: Restrict SSA reads to the reachable CFG.
|
2025-03-07 11:13:53 +01:00 |
|
Anders Schack-Mulligen
|
b1e53f5816
|
Rust: Accept consistency failure.
|
2025-03-07 11:11:49 +01:00 |
|
Jeroen Ketema
|
87ee191409
|
Merge pull request #18928 from jketema/desc
C++: Improve query description and fix alignment of the text
|
2025-03-07 10:47:31 +01:00 |
|
Geoffrey White
|
b6c9be23c1
|
Merge branch 'main' into constcrypto
|
2025-03-07 09:11:10 +00:00 |
|
Michael Nebel
|
c9796ee297
|
C#: Add cs/call-to-object-tostring to the CCR query suite.
|
2025-03-07 09:52:08 +01:00 |
|
Michael Nebel
|
82b7a19df1
|
Merge pull request #18894 from michaelnebel/csharp/garbagetypes
C#: Handle some BMN garbage types.
|
2025-03-07 09:19:48 +01:00 |
|
Napalys
|
e0f20b2bd1
|
Add RegExpIntersection class to support intersection terms in regex
|
2025-03-07 08:58:19 +01:00 |
|
Simon Friis Vindum
|
fc186eb136
|
Include -r flag to code when creating change note
Co-authored-by: Taus <tausbn@github.com>
|
2025-03-07 08:47:21 +01:00 |
|
Napalys
|
9cc26208d4
|
Add test cases for v flag operators in RegExp library-tests.
|
2025-03-07 08:32:10 +01:00 |
|
Jon Janego
|
468c12e656
|
Merge pull request #18944 from github/changedocs-2.20.6
Changedocs for 2.20.6
|
2025-03-06 17:31:59 -06:00 |
|
Andrew Eisenberg
|
2a0e133768
|
Move UnversionedImmutableAction.ql to experimental
This query will give too many false positives for users until
immutable actions is released.
|
2025-03-06 15:08:02 -08:00 |
|
Jon Janego
|
b742ed21db
|
Merge branch 'rc/3.17' into changedocs-2.20.6
|
2025-03-06 16:51:25 -06:00 |
|
Jon Janego
|
65d5e527c0
|
Apply suggestions from code review
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
|
2025-03-06 16:46:57 -06:00 |
|
Jon Janego
|
da7b9b7c20
|
rearranging golang 1.24 support
|
2025-03-06 15:32:48 -06:00 |
|
Jon Janego
|
3652a45a97
|
Update codeql-cli-2.20.4.rst
|
2025-03-06 15:10:42 -06:00 |
|
Jon Janego
|
1385de223f
|
Update codeql-cli-2.20.4.rst
|
2025-03-06 15:10:11 -06:00 |
|
Jon Janego
|
2b818e3a4f
|
Update codeql-cli-2.19.4.rst
|
2025-03-06 15:04:55 -06:00 |
|
Jon Janego
|
fc6794f6df
|
adding 2.20.6 sitedocs
|
2025-03-06 14:12:54 -06:00 |
|
Geoffrey White
|
42e7d1e983
|
Rust: Fix typo.
|
2025-03-06 19:09:01 +00:00 |
|
Geoffrey White
|
9af2d0218b
|
Rust: Add the new sinks to stats.
|
2025-03-06 18:50:11 +00:00 |
|
Geoffrey White
|
952e417d13
|
Rust: Tweak some wording.
|
2025-03-06 18:46:37 +00:00 |
|
REDMOND\brodes
|
b9bd199432
|
Regression fixes for JCA
|
2025-03-06 13:39:23 -05:00 |
|
Geoffrey White
|
e564c41043
|
Rust: Compute security-severity tag.
|
2025-03-06 18:36:55 +00:00 |
|
Tom Hvitved
|
5c3f21b20c
|
Merge pull request #18937 from hvitved/rust/fix-bad-joins
Rust: Fix bad joins
|
2025-03-06 19:11:31 +01:00 |
|
Geoffrey White
|
95be12ed80
|
Rust: Add qhelp and examples.
|
2025-03-06 17:48:47 +00:00 |
|
Geoffrey White
|
b4a6063e20
|
Rust: Add std::mem::zeroed as a source.
|
2025-03-06 17:48:45 +00:00 |
|
Geoffrey White
|
ac94ac6584
|
Rust: Model even more sinks + flows.
|
2025-03-06 17:48:44 +00:00 |
|
Geoffrey White
|
055baf2769
|
Rust: Improve results on arrays (less duplication).
|
2025-03-06 17:48:43 +00:00 |
|
Geoffrey White
|
aacbfc0fd8
|
Rust: Improve alert messages.
|
2025-03-06 17:48:41 +00:00 |
|
Geoffrey White
|
a6e106e025
|
Rust: Model more sinks + flows.
|
2025-03-06 17:48:40 +00:00 |
|
Geoffrey White
|
9fb00daeec
|
Rust: Implement the query (with one source, one sink model).
|
2025-03-06 17:48:39 +00:00 |
|
Geoffrey White
|
bd75f0187b
|
Rust: More test cases.
|
2025-03-06 17:48:37 +00:00 |
|
Napalys
|
c12c12c416
|
Added modeling for react-relay functions that retrieve data.
|
2025-03-06 18:30:21 +01:00 |
|
Napalys
|
5a1991bb69
|
Added test cases for react-relay functions that retrieve data
|
2025-03-06 18:10:27 +01:00 |
|
Napalys
|
89040d0d06
|
Added missing response and request MaD source kinds.
|
2025-03-06 18:10:25 +01:00 |
|
Napalys
|
0166e76cca
|
Add change note
|
2025-03-06 18:10:24 +01:00 |
|
Napalys
|
1443f314a1
|
Added react-relay useFragment as threat model source.
|
2025-03-06 18:10:23 +01:00 |
|
Napalys
|
1e3b8625e6
|
Added a test case where useFragment from react-relay should be marked as a source but isn't
|
2025-03-06 18:10:21 +01:00 |
|
Michael B. Gale
|
16e84d0ad0
|
Merge pull request #18929 from github/mbg/go/filter-more-vendor-dirs
Go: Support more dependency managers in `IsGolangVendorDirectory`
|
2025-03-06 16:10:18 +00:00 |
|
Michael B. Gale
|
b872c60e1c
|
Go: Support more dependency managers in IsGolangVendorDirectory
|
2025-03-06 15:40:44 +00:00 |
|
Anders Schack-Mulligen
|
da579c27fc
|
Merge pull request #18934 from aschackmull/ssa/refactor5
SSA: Replace the Guards interface in the SSA data flow integration.
|
2025-03-06 15:11:52 +01:00 |
|
Taus
|
6546bb1b1d
|
Merge branch 'main' into tausbn/python-fix-match-pruning-logic
|
2025-03-06 14:37:58 +01:00 |
|
Geoffrey White
|
9a35febe80
|
Rust: Query framework and basic tests.
|
2025-03-06 13:24:05 +00:00 |
|
Anders Schack-Mulligen
|
97a3411c0c
|
Ruby: Accept test output.
|
2025-03-06 13:58:14 +01:00 |
|
Michael Nebel
|
61c043fd4a
|
Merge pull request #18935 from michaelnebel/csharp/useless-if-statement
C#: Fewer alerts in `cs/useless-if-statement`.
|
2025-03-06 13:53:20 +01:00 |
|
Taus
|
a9ab39da1b
|
Merge pull request #18448 from github/tausbn/python-add-type-annotation-metrics-query
Python: Add metrics query for type annotations
|
2025-03-06 13:52:26 +01:00 |
|
Anders Schack-Mulligen
|
5e722eecf7
|
Ruby: Push in casts to Definition to delete the then unused DefinitionExt.
|
2025-03-06 13:31:31 +01:00 |
|