hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-23 04:02:07 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
copilot/add-cpp-regular-expression-parser
codeql/actions/ql/lib/change-notes/released/0.4.36.md
github-actions[bot] e38616a2ef Release preparation for version 2.25.5
2026-05-18 12:05:32 +00:00

758 B
Raw Permalink Blame History

0.4.36

Minor Analysis Improvements

  • Altered 2 patterns in the poisonable_steps modelling. Extra sinks are detected in the following cases: scripts executed via python modules and go run in directories are detected as potential mechanisms of injection. For the go execution pattern, the pattern is updated to now ignore flags that occur between go and the specific command. This change may lead to more results being detected by the following queries: actions/untrusted-checkout/high, actions/untrusted-checkout/critical, actions/untrusted-checkout-toctou/high, actions/untrusted-checkout-toctou/critical, actions/cache-poisoning/poisonable-step, actions/cache-poisoning/direct-cache and actions/artifact-poisoning/path-traversal.