copilot-swe-agent[bot] 8efaa5daf1 Fix imprecise patterns in isSubprocessTarExtraction predicate ...

Use regexpMatch instead of matches to avoid false positives:
- Command name: regexpMatch(\"(.*/)?tar\") to match only \"tar\" or paths ending in \"/tar\"
- Extraction flag: regexpMatch(\"-[a-zA-Z]*x[a-zA-Z]*\") to match only single-dash flags containing x

Agent-Logs-Url: https://github.com/github/codeql/sessions/f31a3622-9b18-415f-85f1-62ec14a8319f

Co-authored-by: hvitved <3667920+hvitved@users.noreply.github.com>

2026-04-16 08:38:54 +00:00

..

consistency-queries

Python: Fix consistency test failures

2026-01-30 12:50:25 +00:00

examples

Python: Fix example snippets

2025-11-26 12:30:30 +00:00

integration-tests/query-suite

python: Add query for prompt injection

2026-01-29 23:47:52 +01:00

lib

Fix imprecise patterns in isSubprocessTarExtraction predicate

2026-04-16 08:38:54 +00:00

src

Merge branch 'main' into post-release-prep/codeql-cli-2.25.2

2026-04-14 13:56:52 +01:00

test

Add shutil.unpack_archive and subprocess tar extraction as TarSlip sources and sinks

2026-04-16 08:34:36 +00:00