github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
60 163 коммитов 1 541 ветка 130 Теги 483 MiB
Граф коммитов

368 Коммитов

Автор SHA1 Сообщение Дата
Dave Bartolomeo b18a6d5e0b
Merge pull request #14582 from github/dbartol/threat-models-2 
Java: Threat model implementation with priorities.
 2023-10-27 09:33:53 -04:00
Anders Schack-Mulligen e9cb272396
Merge pull request #14615 from aschackmull/dataflow/stage-alias 
Dataflow: simplify using stage aliases.
 2023-10-27 14:17:30 +02:00
Anders Schack-Mulligen 10c657bc23 Dataflow: simplify using stage aliases. 2023-10-27 13:40:21 +02:00
Mathias Vorreiter Pedersen 9cae488ef4
Merge pull request #14612 from aschackmull/dataflow/type-doc 
Dataflow: Improve qldoc on the type system.
 2023-10-27 10:39:57 +01:00
Anders Schack-Mulligen 776e35279d Dataflow: Improve qldoc on the type system. 2023-10-27 10:43:54 +02:00
Michael Nebel e4276f7adb
Java: Apply suggestions from code review 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
 2023-10-27 10:34:20 +02:00
Anders Schack-Mulligen b106db6fda Dataflow: Add change note for partial flow api change. 2023-10-27 09:46:46 +02:00
Dave Bartolomeo d2afb20f3f Merge remote-tracking branch 'origin/main' into dbartol/threat-models-2 2023-10-26 14:05:40 -04:00
Dave Bartolomeo 9800458467
Update shared/threat-models/codeql/threatmodels/ThreatModels.qll 
Co-authored-by: Michael Nebel <michaelnebel@github.com>
 2023-10-26 13:46:55 -04:00
Dave Bartolomeo 927eb8424d
Update shared/threat-models/codeql/threatmodels/ThreatModels.qll 
Co-authored-by: Michael Nebel <michaelnebel@github.com>
 2023-10-26 13:46:37 -04:00
Dave Bartolomeo 8d9e4d391f
Update shared/threat-models/codeql/threatmodels/ThreatModels.qll 
Co-authored-by: Michael Nebel <michaelnebel@github.com>
 2023-10-26 13:46:28 -04:00
Mathias Vorreiter Pedersen 30ecb4b0c8
Merge pull request #14588 from aschackmull/shared/rangeanalysis 
C++/Java: Share core range analysis
 2023-10-26 16:32:46 +01:00
Anders Schack-Mulligen a2e3b37847 Dataflow: Fix accidental visibility. 2023-10-26 11:28:52 +02:00
Anders Schack-Mulligen 4dca4a7389 Dataflow: Restrict partial flow to either forward or reverse flow. 2023-10-26 10:33:03 +02:00
Anders Schack-Mulligen 283d6efdf8 Rangeanalysis/Java/C++: Address some ql4ql findings. 2023-10-25 14:06:35 +02:00
Anders Schack-Mulligen c1c4a5bfcf Rangeanalysis: Copy qldoc and simplification from Java. 2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen cd44d67529 Rangeanalysis: Add temporary Java compatibility flag. 2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen 06fe10bbe9 Rangeanalysis: Bugfix division with float representation. 2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen 232c147f6b Rangeanalysis: Port join-order fix from Java version. 2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen 38274db205 Rangeanalysis: Parameterise library. 2023-10-25 11:17:01 +02:00
Anders Schack-Mulligen 169ba03778 Rangeanalysis: Copy C++ version verbatim. 2023-10-25 11:17:01 +02:00
Anders Schack-Mulligen aed830cf1b Rangeanalysis: Make new qlpack 2023-10-25 11:17:01 +02:00
Dave Bartolomeo 33f10d8d19 Better handling of `all` threat model without too many binding sets 2023-10-24 13:59:15 -04:00
Dave Bartolomeo 5fd56ce866 Alternate threat model implementation 2023-10-24 13:12:37 -04:00
Joe Farebrother 3f11d83b7b
Merge pull request #14500 from joefarebrother/shared-filepath-normalize 
Shared: Add library for filepath normalization
 2023-10-23 16:09:44 +01:00
Dave Bartolomeo 15e9838f16 Add a readme file 2023-10-19 17:27:21 -04:00
Dave Bartolomeo c268163804 warnOnImplicitThis 2023-10-19 17:18:47 -04:00
Dave Bartolomeo 910b2a98f1 Merge remote-tracking branch 'origin/main' into dbartol/threat-models 2023-10-19 17:07:38 -04:00
Dave Bartolomeo bd7de83aab Use extension packs for threat models 2023-10-19 17:07:26 -04:00
github-actions[bot] 8dcd8b9e5b Post-release preparation for codeql-cli-2.15.1 2023-10-17 20:24:00 +00:00
Joe Farebrother aa418dc7d0 Add more line breaks in qldoc 2023-10-17 12:51:22 +01:00
github-actions[bot] 3b3c036626 Release preparation for version 2.15.1 2023-10-16 17:49:39 +00:00
Joe Farebrother 05162c68ec Fix typo 2023-10-16 13:43:06 +01:00
Joe Farebrother aade79f723 Improve qldoc and fix changenote 2023-10-16 13:02:28 +01:00
Joe Farebrother 9097d93ac7 Add shared library for filepath normalization 2023-10-13 17:07:47 +01:00
erik-krogh fa1e8ee426
add getACodepoint to the shared Strings library, and use it in NfaUtils 2023-10-12 13:38:19 +02:00
erik-krogh 116025c569
use the new codePointAt and codePointCount methods instead of regex hacks 2023-10-12 13:38:19 +02:00
Henry Mercer 1a370bfbbe
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0 
Post-release preparation for codeql-cli-2.15.0
 2023-10-11 17:39:04 +01:00
github-actions[bot] ae6af17c74 Post-release preparation for codeql-cli-2.15.0 2023-10-11 14:19:20 +00:00
Erik Krogh Kristensen 625e889c62
Merge pull request #14339 from erik-krogh/range-printing 
JS/PY/RB/Java: escape unicode chars in overly-large-range
 2023-10-09 14:22:38 +02:00
Edward Minnix III 8e653d01a8
Merge pull request #14127 from egregius313/egregius313/java/mad/localuserinput 
Java: Convert implementations of `LocalUserInput` to Models-as-Data
 2023-10-04 12:55:44 -04:00
github-actions[bot] 9fe993bec3 Release preparation for version 2.15.0 2023-10-04 14:15:27 +00:00
Ed Minnix e122d81336 Add new source kinds for threat modeling 2023-10-03 22:29:00 -04:00
Henry Mercer da92da2204 Bump minor versions of packs we regularly release 2023-10-03 16:31:23 +01:00
Henry Mercer f3847b3f51 Merge branch 'main' into henrymercer/rc-3.11-mergeback 2023-10-03 16:30:23 +01:00
Tom Hvitved 2684a22484
Merge pull request #14255 from hvitved/dataflow/perf-improvements 
Data flow: Performance improvements
 2023-10-02 16:37:24 +02:00
Tom Hvitved 4fa93a077c Address review comments 2023-10-02 09:03:12 +02:00
erik-krogh 5d4b542995
escape unicode chars in overly-large-range 2023-09-28 20:16:09 +02:00
Asger F 0d96ed8aee
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers 
Shared: add in/out barriers with flow state
 2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen 80f00bcb0b FileSystem: Improve regex by only matching once instead of 3x. 2023-09-28 08:58:55 +02:00