hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
ef6f0e5b302b448ccd0b666345e9e3749be4f6f0
codeql/ruby
History
Harry Maclean ef6f0e5b30 Ruby: Add Improper Memoization query 
This query finds cases where a method memoizes its result but fails to
include one or more of its parameters in the memoization key (or doesn't
use memoization keys at all). This can lead to the method returning
incorrect results when subsequently called with different arguments.
2022-06-16 12:44:33 +12:00
..
.vscode
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
actions/create-extractor-pack
Simplify cache key
2022-02-04 07:41:29 +13:00
autobuilder
Revert "Ruby: extract rbi files"
2022-04-24 22:48:52 +01:00
doc
Move Ruby doc on db upgrades to common docs dir
2022-02-16 11:35:52 +00:00
downgrades
Ruby: add upgrade and downgrade scripts
2022-04-28 13:47:14 +02:00
extractor
Bump regex from 1.5.4 to 1.5.5 in /ruby
2022-06-14 00:38:02 +00:00
generator
Ruby: update tree-sitter-ruby
2022-05-16 19:08:46 +02:00
node-types
Ruby: remove redundant closure
2021-12-02 16:29:59 +00:00
old-change-notes
Move older change notes to old-change-notes
2021-12-14 12:35:04 -05:00
ql
Ruby: Add Improper Memoization query
2022-06-16 12:44:33 +12:00
scripts
Python/Ruby: rm old prepare-db-upgrade.sh files
2022-02-16 12:21:52 +00:00
tools
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
.gitattributes
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
.gitignore
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
Cargo.lock
Merge branch 'main' into dependabot/cargo/ruby/crossbeam-utils-0.8.8
2022-06-14 12:34:29 +02:00
Cargo.toml
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
codeql-extractor.yml
Revert "Ruby: extract rbi files"
2022-04-24 22:48:52 +01:00
Cross.toml
Ruby: add configuration for 'cross'
2022-02-11 12:50:33 +01:00
Makefile
Fix CI jobs
2021-11-23 22:03:01 +01:00
README.md
Ruby: clean up docs
2021-10-28 12:04:48 +01:00
rust-toolchain.toml
Ruby: add configuration for 'cross'
2022-02-11 12:50:33 +01:00

README.md

Ruby analysis support for CodeQL

This directory contains the extractor, CodeQL libraries, and queries that power Ruby support in LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

It contains two major components:

  1. static analysis libraries and queries written in CodeQL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.
  2. an extractor, written in Rust, that parses Ruby source code and converts it into a database that can be queried using CodeQL. See Developer information for information on building the extractor (you do not need to do this if you are only developing queries).