github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
72 035 коммитов 1 534 Ветки 130 Теги 471 MiB
Граф коммитов

72035 Коммитов

Автор SHA1 Сообщение Дата
Calum Grant 2351328aa1 C++: Rename SourceFiles metric 2024-11-11 17:16:46 +00:00
Calum Grant 593dcb646b C++: Remove missing includes test 2024-11-11 17:16:44 +00:00
Calum Grant fb82d435b5 C++: Various renamings 2024-11-11 17:16:43 +00:00
Calum Grant 34ee947d2f C++: Limit number of errors/includes to 50 2024-11-11 17:16:42 +00:00
Calum Grant e6f3512056 C++: Remove unused class UndefinedIdentifier 2024-11-11 17:16:41 +00:00
Calum Grant faeff396eb C++: Limit metrics to top 500 2024-11-11 17:16:39 +00:00
Calum Grant 067ecdeea0 C++: Match more tags 2024-11-11 17:16:38 +00:00
Calum Grant 9a81ce8bb4 C++: Separate int and float metrics 2024-11-11 17:16:37 +00:00
Calum Grant 8d2cef632e C++: Minor edits 2024-11-11 17:16:36 +00:00
Calum Grant 6c402adbcc C++: Minor edits 2024-11-11 17:16:35 +00:00
Calum Grant a53e1dec20 C++: Minor edits 2024-11-11 17:16:34 +00:00
Calum Grant f6776a4249 C++: Initial telemetry queries and tests 2024-11-11 17:16:32 +00:00
Jeroen Ketema a5a6445b2e
C++: Add tests for experimental `cpp/guarded-free` query 2024-11-11 17:29:28 +01:00
Simon Friis Vindum cd2038a8f8 Rust: Setup inline flow test library 2024-11-11 16:41:59 +01:00
Cornelius Riemenschneider fed240a2b2
Merge pull request #17956 from github/criemen/rust-upd-deps 
Rust: Update cargo dependencies.
 2024-11-11 16:06:09 +01:00
Napalys 00790bf3f4 Added change notes 2024-11-11 15:43:54 +01:00
Napalys Klicius 1eabb6cbdd
Update javascript/ql/test/experimental/Security/CWE-918/check-regex.js 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
 2024-11-11 15:40:22 +01:00
Napalys Klicius 42f7f73ae1 Update ArrayInPlaceManipulationTaintStep documentation 2024-11-11 15:38:57 +01:00
Michael Nebel 425b1b17d1
Merge pull request #17952 from michaelnebel/java/movemodels 
Java: Move non-experimental models out of the experimental folder.
 2024-11-11 15:28:53 +01:00
Tamas Vajk 46f168823c Improve code quality 2024-11-11 14:10:13 +01:00
Calum Grant 2f032ec7b8 C++: Revert 17694 and keep tests 2024-11-11 13:06:50 +00:00
Paolo Tranquilli 5ef92a281b Rust: fix integration test on windows 2024-11-11 13:37:25 +01:00
Paolo Tranquilli 34361b81eb Rust: reorganize options integration tests 2024-11-11 13:11:10 +01:00
Tamas Vajk fe62900a15 C#: Change extractor to accept multiple `binlog` files 2024-11-11 12:56:24 +01:00
Michael B. Gale d6ef8c3f9a
Merge pull request #17946 from github/dependabot/go_modules/go/extractor/extractor-dependencies-c113e28156 
Bump golang.org/x/tools from 0.26.0 to 0.27.0 in /go/extractor in the extractor-dependencies group
 2024-11-11 11:31:21 +00:00
Cornelius Riemenschneider e8aa5db07a Rust: Update cargo dependencies. 
There was a recent round of tree-sitter-* package releases,
so the latest code is now a) released and b) available on crates.io.

Therefore, move away from the (super slow on CI) git dependencies to released crates instead.
This also includes a run of `cargo update`, so there's a bunch of more changes to the lockfile.
 2024-11-11 12:13:14 +01:00
Simon Friis Vindum ad6bd88f0a
Merge pull request #17954 from paldepind/rust-data-flow-fix-inconsistencies 
Rust: Fix data flow fix inconsistencies
 2024-11-11 11:56:10 +01:00
Chris Smowton 89a2f0dc00
Merge pull request #17890 from smowton/smowton/fix/kotlin-use-nulltype 
Kotlin extractor: use special <nulltype> for null literals
 2024-11-11 10:54:21 +00:00
Simon Friis Vindum aebce746df Rust: Create data flow nodes for parameters in the CFG 
Before data flow nodes where created for all parameters in the AST. But
some AST parameters does not lead to any data flow (for instance
parameters in function pointer types).
 2024-11-11 11:46:10 +01:00
Simon Friis Vindum 6a3d417836 Rust: Implement enclosing callable for additional classes 2024-11-11 11:11:29 +01:00
Napalys ae57c12b15 Added change notes 2024-11-11 10:38:14 +01:00
Michael Nebel 404ca27aec Java: Move non-experimental models out of the experimental folder. 2024-11-11 10:08:45 +01:00
Paolo Tranquilli 07c59f7562 Rust: fix integration tests 2024-11-11 09:55:46 +01:00
Simon Friis Vindum bf07aa1cbd
Merge pull request #17947 from paldepind/rust-ssa-node-printing 
Rust: Mark SSA data flow nodes in output and hide them in paths
 2024-11-11 09:55:26 +01:00
Paolo Tranquilli 0298743f2a Merge branch 'main' into redsun82/rust-cargo-options 2024-11-11 09:47:59 +01:00
Simon Friis Vindum 9f0fba16cd Rust: Fix grammar and add documentation comments 2024-11-11 09:46:47 +01:00
Simon Friis Vindum db1b698689 Rust: Accept fixed spurious results 2024-11-11 08:59:34 +01:00
Simon Friis Vindum 54172774d5 Merge branch 'main' into rust-async-blocks 2024-11-11 08:50:51 +01:00
Simon Friis Vindum 55796badaf Rust: Mark SSA data flow nodes in output and hide them in paths 2024-11-11 08:48:48 +01:00
Simon Friis Vindum e3662fa97f
Merge pull request #17923 from geoffw0/unreachable4 
Rust: More tests for rust/deadcode
 2024-11-11 08:45:47 +01:00
Napalys 81bc7cd19f Refactored SortTaintStep to ArrayInPlaceManipulationTaintStep to support both sort and reverse functions. Fixed newly added test case. from 8026a99db7 2024-11-11 08:32:03 +01:00
Napalys 1c298f0231 Added test case for Array.prototype.reverse, which is currently not flagged as a potential sink. 2024-11-11 08:32:02 +01:00
Napalys f1c6dc1d9b Moved SortTaintStep to more appropriate home TaintTracking->Arrays 2024-11-11 08:32:01 +01:00
dependabot[bot] 916184964b
Bump golang.org/x/tools 
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/tools](https://github.com/golang/tools).


Updates `golang.org/x/tools` from 0.26.0 to 0.27.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-11 03:24:36 +00:00
Simon Friis Vindum a5e13ee71b Rust: Handle async blocks in SSA analysis 2024-11-10 11:59:37 +01:00
Simon Friis Vindum 74a6d9812d Rust: Add SSA test for async blocks 2024-11-10 11:33:03 +01:00
Simon Friis Vindum 8e6844e4da Merge branch 'main' into rust-async-blocks 2024-11-10 09:28:14 +01:00
Owen Mansel-Chan 0b24235de4
Update test results 2024-11-09 07:56:44 +00:00
Owen Mansel-Chan 9afdee4697
Accept changed test results and improve test 2024-11-09 07:55:02 +00:00
Florin Coada f3c7352727
Merge pull request #17935 from github/changedocs/2.19.3 
Changedocs for 2.19.3
 2024-11-08 17:58:54 +00:00