codeql

mirror of https://github.com/github/codeql.git synced 2026-03-31 12:48:17 +02:00

Files

MarkLee131 da4a2238bc Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

- Model Signature.getInstance() as CryptoAlgoSpec sink (previously only
  Signature constructor was modeled)
- Add HMAC-based algorithms (HMACSHA1/256/384/512, HmacSHA1/256/384/512)
  and PBKDF2 to the secure algorithm whitelist
- Fix XDH/X25519/X448 tests to use KeyAgreement.getInstance() instead of
  KeyPairGenerator.getInstance() to match their key agreement semantics
- Add test cases for SHA384withECDSA, HMACSHA*, and PBKDF2WithHmacSHA1
  from user-reported false positives
- Update change note to document all additions

2026-03-28 16:53:46 +08:00

experimental

Java: Update test expectations

2026-03-04 12:44:56 +00:00

ext

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

library-tests

Merge pull request #21412 from aschackmull/java/binary-assignment

2026-03-05 13:19:45 +01:00

query-tests

Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs