mirror of
https://github.com/hohn/sarif-cli.git
synced 2025-12-16 09:13:04 +01:00
wip: notes cleanup
This commit is contained in:
committed by
=Michael Hohn
parent
9b733e6326
commit
dc8a4929fa
@@ -1,3 +1,16 @@
|
||||
# -*- mode: org; org-confirm-babel-evaluate: nil; coding: utf-8 -*-
|
||||
#+OPTIONS: org-confirm-babel-evaluate:nil
|
||||
#+LANGUAGE: en
|
||||
#+TEXT:
|
||||
#+OPTIONS: ^:{} H:2 num:t \n:nil @:t ::t |:t ^:nil f:t *:t TeX:t LaTeX:t skip:nil p:nil
|
||||
#+OPTIONS: toc:nil
|
||||
#+HTML_HEAD: <link rel="stylesheet" type="text/css" href="./l3style.css"/>
|
||||
#+HTML: <div id="toc">
|
||||
#+TOC: headlines 2 insert TOC here, with two headline levels
|
||||
#+HTML: </div>
|
||||
#
|
||||
#+HTML: <div id="org-content">
|
||||
|
||||
* The notes directory
|
||||
This directory is for notes that may be useful, but aren't complete enough to
|
||||
serve as documentation in their current state.
|
||||
@@ -35,59 +48,23 @@
|
||||
The =automationDetails.id= entry is produced by CodeQL when using the
|
||||
=--sarif-category= flag.
|
||||
|
||||
Using
|
||||
#+BEGIN_SRC text
|
||||
0:$ codeql --version
|
||||
CodeQL command-line toolchain release 2.12.6.
|
||||
The prerequisites for tracing its flow through the tools is started in
|
||||
[[../data/build-multiple-sarifs.sh]]
|
||||
|
||||
#+BEGIN_SRC sh :session shared :results output
|
||||
cd ~/local/sarif-cli/ && ag -l automationDetails |cat
|
||||
#+END_SRC
|
||||
|
||||
and running
|
||||
#+BEGIN_SRC sh
|
||||
cd ../data/codeql-dataflow-sql-injection/ &&
|
||||
sarif-extract-scans-runner - > /dev/null <<EOF
|
||||
sqlidb-0.sarif
|
||||
EOF
|
||||
#+END_SRC
|
||||
#+RESULTS:
|
||||
: notes/README.org
|
||||
: notes/README.html
|
||||
: scripts/table-tests.sh
|
||||
: sarif_cli/signature_single_CLI.py
|
||||
: sarif_cli/table_joins_CLI.py
|
||||
: sarif_cli/scan_tables.py
|
||||
: sarif_cli/signature.py
|
||||
:
|
||||
: [32mhohn@gh-hohn [33m~/local/sarif-cli[0m
|
||||
|
||||
results in
|
||||
#+BEGIN_SRC text
|
||||
hohn@gh-hohn ~/local/sarif-cli
|
||||
0:$ cat data/codeql-dataflow-sql-injection/sqlidb-0.sarif.csv
|
||||
sarif_file,level,levelcode,message,extra_info
|
||||
sqlidb-0.sarif,WARNING,2,Input sarif is missing neccesary properties.,"Missing: {'versionControlProvenance', 'newlineSequences'}, "
|
||||
#+END_SRC
|
||||
|
||||
An older version is needed.
|
||||
|
||||
#+BEGIN_SRC sh
|
||||
export GITHUB_TOKEN=...
|
||||
|
||||
gh codeql list-versions
|
||||
gh codeql download v2.12.7
|
||||
gh codeql download v2.11.6
|
||||
gh codeql download v2.10.5
|
||||
gh codeql download v2.9.4
|
||||
|
||||
gh codeql install-stub
|
||||
|
||||
gh codeql set-version v2.11.6
|
||||
#+END_SRC
|
||||
|
||||
Some hacking around qlpacks is required; see
|
||||
[[../data/build-multiple-sarifs.sh]], Pack compatibility with CLI.
|
||||
|
||||
Using that, I get sarif files to examine:
|
||||
#+BEGIN_SRC text
|
||||
hohn@gh-hohn ~/local/sarif-cli/data/codeql-dataflow-sql-injection
|
||||
0:$ ls -la sqlidb*.sarif
|
||||
-rw-r--r-- 1 hohn staff 6.2K Jul 11 10:39 sqlidb-0.sarif
|
||||
-rw-r--r-- 1 hohn staff 6.3K Jul 11 10:40 sqlidb-1.sarif
|
||||
#+END_SRC
|
||||
and only the second has the additional field:
|
||||
#+BEGIN_SRC sh
|
||||
0:$ grep -A2 automationDetails sqlidb*.sarif
|
||||
sqlidb-1.sarif: "automationDetails" : {
|
||||
sqlidb-1.sarif- "id" : "mast-issue/"
|
||||
sqlidb-1.sarif- },
|
||||
#+END_SRC
|
||||
#+HTML: </div>
|
||||
|
||||
|
||||
@@ -1,3 +1,7 @@
|
||||
:root {
|
||||
--margin-left: 40%;
|
||||
--body-width: 60%;
|
||||
}
|
||||
|
||||
/* The sum of width and margin percentages must not exceed 100.*/
|
||||
div#toc {
|
||||
@@ -8,30 +12,33 @@ div#toc {
|
||||
/* OR */
|
||||
/* use a fixed-position toc */
|
||||
position: fixed;
|
||||
top: 80px;
|
||||
top: 8px;
|
||||
left: 0px;
|
||||
|
||||
/* match toc, org-content, postamble */
|
||||
width: 26%;
|
||||
width: var(--margin-left);
|
||||
margin-right: 1%;
|
||||
margin-left: 1%;
|
||||
|
||||
overflow-y: scroll;
|
||||
height: calc(100% - 10px);
|
||||
|
||||
}
|
||||
|
||||
div#org-content {
|
||||
float: right;
|
||||
width: 70%;
|
||||
width: var(--body-width);
|
||||
/* match toc, org-content, postamble */
|
||||
margin-left: 28%;
|
||||
margin-left: var(--margin-left);
|
||||
}
|
||||
|
||||
div#postamble {
|
||||
float: right;
|
||||
width: 70%;
|
||||
width: var(--body-width);
|
||||
/* match toc, org-content, postamble */
|
||||
margin-left: 28%;
|
||||
margin-left: var(--margin-left);
|
||||
}
|
||||
|
||||
|
||||
p.author {
|
||||
clear: both;
|
||||
font-size: 1em;
|
||||
@@ -107,9 +114,9 @@ h1 {
|
||||
color: #cc8c00;
|
||||
/* padding-top: 5px; */
|
||||
border-bottom: 2px solid #aaa;
|
||||
width: 70%;
|
||||
/* match toc, org-content, postamble */
|
||||
margin-left: 28%; /* Align with div#content */
|
||||
width: var(--body-width);
|
||||
/* match toc, org-content, postamble */
|
||||
width: var(--margin-left); /* Align with div#content */
|
||||
}
|
||||
|
||||
h2 {
|
||||
@@ -167,4 +174,3 @@ td, th {
|
||||
vertical-align: top;
|
||||
border: 1pt solid #ADB9CC;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user