Michael Hohn
5a8b4a33a3
Add script to test all steps using different codeql cli versions
...
The script
build-multiple-codeql-versions.sh
is for manual testing and updating.
It may be automated for testing.
2023-07-26 12:13:37 -07:00
Michael Hohn
3dfb297612
Make project_name unique by adding automationDetails to it
2023-07-20 22:39:10 -07:00
Michael Hohn
ebeaced0f4
Remove automationDetails from CSV output
...
This reverses commit 68b43e05
2023-07-17 10:30:35 -07:00
Michael Hohn
8820186152
Add sample output for test-vcp
2023-07-13 16:46:24 -07:00
Michael Hohn
1d85d13efb
Execute test-vcp with tracing
2023-07-13 16:35:33 -07:00
Michael Hohn
c299321ab8
Remove repls; add scripts/test-vcp.sh
2023-07-13 16:03:01 -07:00
Michael Hohn
f1a70dd023
wip: remove extraneous slash
2023-07-13 15:55:28 -07:00
Michael Hohn
7d4e5026a9
Add note about bin/sarif-insert-vcp
2023-07-13 12:52:59 -07:00
Michael Hohn
68b43e0514
wip: debug and get automationDetails into CSV output
2023-07-12 17:04:23 -07:00
Michael Hohn
742392338e
wip: finally get CSV; use script to insert versionControlProvenance
2023-07-11 20:27:59 -07:00
Michael Hohn
dc8a4929fa
wip: notes cleanup
2023-07-11 20:26:40 -07:00
Michael Hohn
9b733e6326
Script to add versionControlProvenance
2023-07-11 20:25:16 -07:00
Michael Hohn
62ec56948e
WIP: debug missing field propagation for automationDetails.id
...
Create SARIF files with and without automationDetails.id for examination.
2023-07-11 10:45:15 -07:00
Michael Hohn
606912c8c3
Merge remote-tracking branch 'refs/remotes/origin/master'
2023-07-10 09:03:45 -07:00
Kristen Newbury
6b248d2474
Add missing columns to column order list
...
prev missing cols: source_location and sink_location
missing from prev patch
but were missing in problem only results case anyways
2023-06-02 16:22:18 -04:00
Kristen Newbury
a3aed444c1
Add explicit column ordering to to_csv writes
...
in interfaces:
sarif-pad-aggregates
sarif-extract-scans
2023-05-29 08:58:29 -04:00
Kristen Newbury
9407e5b00f
Add ability to read automationDetails.id if present
2023-05-17 15:23:19 -04:00
Kristen Newbury
e2501b94a9
Fix fulldescription missing patch
...
previous patch added nonunique placeholder
but must be unique
2023-05-15 13:10:07 -04:00
Kristen Newbury
eb50bdf834
Merge branch 'main'
2023-05-15 13:09:21 -04:00
Kristen Newbury
1e1305bb25
Fix CLI sarif consumption for properties:
...
fullDescription
primaryLocationStartColumnFingerprint
2023-03-02 12:43:42 -05:00
Kristen Newbury
953d47edd3
Fix extract scans interface CLI default
2023-03-02 11:43:25 -05:00
Kristen Newbury
1be65372e8
Fix CLI sarif consumption for property - description
2023-03-02 11:16:27 -05:00
Michael Hohn
e62c351029
Merge remote-tracking branch 'kristen/main'
2023-01-23 13:14:14 -08:00
Peter Martin
6be328f785
Merge pull request #5 from bgroh2/fix-dir-names
...
Use repositoryUri instead of org/repo
2023-01-20 09:19:01 -05:00
Benjamin Groh
e8123903f6
Use repositoryUri instead of org/repo
2023-01-18 16:40:39 -05:00
Kristen Newbury
04e3dedb77
Merge pull request #2 from dbeer/exceptions
...
Fix exception reraising
2023-01-12 12:23:00 -05:00
Kristen Newbury
7dad175d4d
Fix tool to default CLI not LGTM sarif input
...
update readme minor improvement
2023-01-12 12:03:51 -05:00
Kristen Newbury
1a915e4de8
Update how project_id is generated
...
previously relied on assumption:
naming like: <org>/<project> in
repositoryUri
now just uses full repositoryUri
2023-01-05 16:37:55 -05:00
Kristen Newbury
fc2c6bac99
Add capability to read sourceLanguage if exists in CLI sarif
...
otherwise dummy val
previously assumed never present in CLI sarif
2023-01-05 12:50:54 -05:00
Daniel Beer
6b475becd9
Fix exception reraising
2022-12-30 12:40:07 -05:00
Kristen Newbury
d602efd3f0
Bugfix signature subset superset mismatch
...
when the template signature portion contains
codeflows it was previously possible that a valid sarif
problem portion that contains extra fields
would be misdiagnosed as not parsable
2022-12-15 19:13:15 -05:00
Kristen Newbury
dae6c50d5b
Bugfix CLI signature merge mistake
2022-12-15 19:13:12 -05:00
Kristen Newbury
dc4fd09e63
Update README missing minor syntax
2022-12-15 19:13:10 -05:00
Kristen Newbury
202f7f53a5
Update README for CLI usage instructions
2022-12-15 19:13:07 -05:00
Kristen Newbury
04a5aae14d
Add CLI support
...
enabled by -f flag with CLI value
tested on sarif from CodeQL CLIs:
2.6.3, 2.9.4, 2.11.4
MUST contain versionControlProvenance property however
2022-12-15 19:12:58 -05:00
Kristen Newbury
bbeba14dec
Bugfix CLI signature merge mistake
2022-12-13 20:13:13 -05:00
Kristen Newbury
efc87d4f08
Update README missing minor syntax
2022-12-13 18:42:45 -05:00
Kristen Newbury
b45d868f89
Update README for CLI usage instructions
2022-12-13 18:32:34 -05:00
Kristen Newbury
69f5ef09a4
Merge branch 'addCLISignature'
2022-12-13 12:22:43 -05:00
Kristen Newbury
2ba9593d70
Add CLI support
...
enabled by -f flag with CLI value
tested on sarif from CodeQL CLIs:
2.6.3, 2.9.4, 2.11.4
MUST contain versionControlProvenance property however
2022-12-13 12:14:32 -05:00
Kristen Newbury
009cf12d2c
Fix load error csv output error
2022-12-12 17:15:49 -05:00
Kristen Newbury
02d8f4cfa2
Doc sarif-pad-aggregate in README
2022-12-05 11:27:59 -05:00
Kristen Newbury
1d1734eabe
Add query_tags column to the results table
2022-12-05 11:27:27 -05:00
Kristen Newbury
ff17cbad2c
Add missing sig fix for populating problem.severity
2022-12-05 10:14:26 -05:00
Kristen Newbury
fb0e1b9c1c
Change sarif sig severity to problem.severity
...
and rm redundant table col for kind
2022-12-02 16:00:40 -05:00
Kristen Newbury
2bda917a4e
Improve error handling on signature mismatch cases
...
and cleanup old todos that have been addressed
2022-11-23 14:06:23 -05:00
Kristen Newbury
01b248a2a9
Update readme
2022-11-16 20:58:27 -05:00
Kristen Newbury
15aa9573e2
Adjust extra properties status from error to warning
2022-11-15 13:35:52 -05:00
Kristen Newbury
e3f2323396
Minimize requirements file
2022-11-15 11:46:56 -05:00
Kristen Newbury
678219beb7
Add csv status aggregate tool
2022-11-15 10:18:12 -05:00
