github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
53 984 коммитов 1 544 Ветки 131 Тег 485 MiB
Граф коммитов

106 Коммитов

Автор SHA1 Сообщение Дата
Rasmus Wriedt Larsen 67df890f68 Misc: Fail by default if query pack can't be found 2021-09-03 10:56:49 +02:00
Rasmus Wriedt Larsen 9386a900eb Misc: Clean whitespace in generate-code-scanning-query-list.py 2021-09-03 10:46:25 +02:00
Tamas Vajk f3f069fed5 Fix markdown link in framework coverage PR comment 2021-07-02 11:56:00 +02:00
Tamas Vajk dc63f23d6b Fix review findings 2021-06-30 13:40:36 +02:00
Tamas Vajk 6a35c8c5f4 Upgrade database in coverage report jobs 2021-06-30 13:40:36 +02:00
Tamás Vajk 10a6089739
Merge pull request #6148 from tamasvajk/feature/try-csv-source-models 
C#: Start using CSV based flow models
 2021-06-30 12:58:42 +02:00
Tamas Vajk 513482b4d5 Adjust code review findings (string escaping) 2021-06-29 08:45:13 +02:00
Tamas Vajk 006303420b Fix CSV framework coverage commenter workflow 2021-06-28 15:07:13 +02:00
Tamas Vajk 3170781d57 Rework timeseries report to iterate git history only once 2021-06-28 11:29:45 +02:00
Tamas Vajk 1ec1e1cfc8 Adjust framework coverage report generator to include all sources not just remote ones 2021-06-28 11:20:32 +02:00
Tamas Vajk 4524563923 Fix timeseries coverage report to handle multiple languages 2021-06-28 11:20:32 +02:00
Tamas Vajk 1d8b19e153 Adjust coverage report generator to allow multiple sink identifiers per CWE 2021-06-28 11:20:32 +02:00
Tamas Vajk 5aba7142e8 C#: Add framework coverage report 2021-06-28 11:20:32 +02:00
Tamas Vajk 016e8fb2cf Adjust framework coverage jobs to cover C# 2021-06-28 11:20:32 +02:00
Tamás Vajk 1cddcdfcb1
Merge pull request #6123 from tamasvajk/feature/framework-coverage-pr 
Add scheduled job to update framework coverage
 2021-06-25 09:18:10 +02:00
Tamas Vajk 477dfa28ec Fix framework coverage commenting action 
This commit handles the case when the current run finds no coverage change and the previous run is identified,
but it doesn't have the required artifacts.
 2021-06-24 10:44:36 +02:00
Tamas Vajk ad6e47be39 Apply code review findings 2021-06-24 09:13:08 +02:00
Tamas Vajk 7557b7a67d Add scheduled coverage job to open PR with changes 2021-06-24 09:13:08 +02:00
Tamas Vajk 9d004ec2d5 Handle case when changes had been reported, and then removed 2021-06-23 08:25:20 +02:00
Tamas Vajk a165cde808 Compute framework coverage diff in artifacts job 2021-06-23 08:25:20 +02:00
Tamas Vajk d6361d8500 Use string interpolation 2021-06-23 08:23:44 +02:00
Tamas Vajk 12e4ad2640 Fix code quality issues 2021-06-23 08:23:44 +02:00
Tamas Vajk d28fd363f9 Fix string vs int ID comparison 2021-06-23 08:23:44 +02:00
Tamas Vajk 801007357f Only post comment with framework coverage change if it changed or wasn't done before 2021-06-23 08:23:44 +02:00
Tamas Vajk 0e91269a23 Refactor framework coverage job to download artifacts from python 2021-06-23 08:23:44 +02:00
Tamas Vajk 07b83d5dc1 Remove commented code 2021-06-17 13:04:39 +02:00
Tamas Vajk 4abaa7870f Add CSV coverage PR commenter 2021-06-17 13:04:39 +02:00
Tamas Vajk 916780a452 Fix codeql CLI path 2021-06-10 15:07:54 +02:00
Tamas Vajk b067309909 Change artifact names 2021-06-10 11:26:07 +02:00
Tamas Vajk 55dd6ed3d1 Allow space separated package patterns in framework-aggregated reports 2021-06-10 10:54:12 +02:00
Tamas Vajk ba9c2e0702 Rework CSV report generator and change timeseries report to use framework.csv 2021-06-10 10:11:24 +02:00
Tamas Vajk c6cb7c6eed Rename time-series file to timeseries 2021-06-10 10:11:24 +02:00
Tamas Vajk d0ec1e2f37 Generate file with package info 2021-06-10 10:11:24 +02:00
Tamas Vajk 3353c3ecdd Add workflow to generate timeseries CSV coverage report 2021-06-10 10:11:24 +02:00
Tamas Vajk 4de4277a8d Add timeseries CSV generator script 2021-06-10 10:11:23 +02:00
Tamas Vajk 18931e39c8 Improve error reporting in CI check for CSV coverage report comparison 2021-05-31 09:52:14 +02:00
Tamas Vajk 8880d0055e Fix file formatting 2021-05-25 13:33:26 +02:00
Tamas Vajk 511486d045 Rework file diff (show line differences) 2021-05-25 13:33:26 +02:00
Tamas Vajk ce53586002 Refactor file comparison 2021-05-25 13:33:26 +02:00
Tamas Vajk 3db22ba482 Add Java coverage report files 2021-05-25 13:33:26 +02:00
Tamas Vajk f09352620f Add comparison step to workflow 2021-05-25 13:33:26 +02:00
Tamas Vajk f1911e338d Move and generate files to documentation folder + clean up after the script is executed 2021-05-25 13:33:26 +02:00
Tamas Vajk 6dc46ec1ee Add org.apache.commons.io to frameworks, and handle overlapping package prefixes 2021-05-25 13:33:25 +02:00
Tamas Vajk 663e6a8d73 Use non-breaking hyphen in CWE identifier 2021-05-25 13:33:25 +02:00
Tamas Vajk dda401f62a Inline CSV table into RST page 2021-05-25 13:33:25 +02:00
Tamas Vajk 2e67a3216c Add option to manually trigger the workflow 2021-05-25 13:33:25 +02:00
Tamas Vajk 1297d1c744 Add framework and cwe static data 2021-05-25 13:33:25 +02:00
Tamas Vajk 2adb3e992a Code quality improvements on coverage report generator script 2021-05-25 13:33:25 +02:00
Tamas Vajk d0a46eb7b7 Adjust formatting 2021-05-25 13:33:25 +02:00
Tamas Vajk f26dba67ac Adjust 'Total' label to 'Totals' 2021-05-25 13:33:25 +02:00
Tamas Vajk 564fca0da4 Adjust workflow triggers and uploads 2021-05-25 13:33:25 +02:00
Tamas Vajk ef414681be Add RST documentation page 2021-05-25 13:33:25 +02:00
Tamas Vajk beea36191b Add CSV file with framework and CWE info to be used in RST file 2021-05-25 13:33:25 +02:00
Tamas Vajk 979034a17f Add github action to generate CSV coverage report 2021-05-25 13:33:25 +02:00
Mathias Vorreiter Pedersen 229ab7623e - Add pre-commit hook script to misc/scripts 
- Refer to it in CONTRIBUTING.md
- Add setup note in docs folder
 2021-01-05 13:47:30 +01:00
Bas van Schaik 31495b876e
Python script to generate lists of code scanning queries in CSV format (#4177) 
* Create a PowerShell script that can be used to report on the set of queries inside of a particular QL Suite.
* Translate PowerShell script into Python
* support running this script from anywhere within the CodeQL git repo
* print non-fatal error if metadata is not available
* make sure warning about missing pack is printed to stderr
* only run on pushes against main and rcs
* detect repo by checking remote, rather than first SHA
* specify full sha of dsaltares/fetch-gh-release-asset
* trigger workflow on PR that modifies paths of interest

Co-authored-by: Justin Hutchings <jhutchings1@users.noreply.github.com>
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
 2020-09-10 12:25:02 -07:00