github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
69 405 коммитов 1 532 Ветки 130 Теги 474 MiB
Граф коммитов

926 Коммитов

Автор SHA1 Сообщение Дата
Jami Cogswell 06bf246afe QL: update regexes 2023-04-16 16:10:23 -04:00
Asger F 2f82f4338a QL: Dont ask me to inline cached predicates 2023-04-12 20:33:21 +02:00
Harry Maclean 2ef6d5c7b9 Ruby/QL: Remove unnecessary CLI config 2023-04-07 15:49:17 +08:00
Harry Maclean c13999100b QL: Update scripts for merged extractor 2023-04-07 15:49:17 +08:00
Harry Maclean eff4729577 QL: Merge extractor binaries into one 
There is now one binary, codeql-ql-extractor, which takes a positional
argument specifying whether to extract, generate or autobuild.
 2023-04-07 15:49:16 +08:00
Harry Maclean e4b4d8a3cd QL: Enable derive feature in clap 
This allows nicer CLI definitions.
 2023-04-07 12:04:02 +08:00
dependabot[bot] 841d91fddb
Bump tree-sitter from 0.20.9 to 0.20.10 in /ql 
Bumps [tree-sitter](https://github.com/tree-sitter/tree-sitter) from 0.20.9 to 0.20.10.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](https://github.com/tree-sitter/tree-sitter/commits)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-06 11:22:51 +00:00
Harry Maclean 8ffb81f63f QL: Bump clap to 4.2 2023-04-06 08:19:58 +08:00
Harry Maclean 77ce6e7122 QL: Clippy fixes 2023-04-05 18:46:57 +08:00
Harry Maclean b6c071a10b Shared: Further consolidate generators 2023-04-05 18:46:57 +08:00
Harry Maclean 5335ec03b5 QL: Remove db generation functions 
These now live in the shared extractor library.
 2023-04-05 18:46:57 +08:00
Asger F e5d090c640
Merge pull request #12671 from asgerf/ql/class-type 
QL: Make Class.getType() only return ClassType
 2023-04-03 09:43:14 +02:00
Asger F 7b4951005b QL: Update test expectations 2023-03-27 13:47:29 +02:00
Asger F 0aceedac78 QL: Make Class.getType() only return ClassType 
Previously this would return both the ClassCharType and ClassType
 2023-03-27 13:39:01 +02:00
dependabot[bot] f92f390457
Bump regex from 1.7.2 to 1.7.3 in /ql 
Bumps [regex](https://github.com/rust-lang/regex) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.7.2...1.7.3)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-27 09:34:18 +00:00
Harry Maclean 6b2e8847f5 Rename shared extractor 
It is now called `tree-sitter-extractor`, to make it clearer that it
builds on tree-sitter grammars.
 2023-03-25 10:43:07 +13:00
Harry Maclean f2fc80b3c1 QL: Bump rust to 1.68 2023-03-23 11:59:14 +13:00
Harry Maclean 8c60b6e657 QL: Merge extractor crates into one 
This mirrors the structure we have in the Ruby extractor, and will allow
us to share more code.
 2023-03-23 11:59:14 +13:00
Harry Maclean 6171eae7a2 QL: Use shared extractor library 2023-03-23 11:59:13 +13:00
Erik Krogh Kristensen 5dc5c8e683
Merge pull request #12629 from erik-krogh/qlTreeSitterQll 
QL: regen TreeSitter.qll
 2023-03-22 12:28:27 +01:00
erik-krogh 5a3ddcfca6
QL: disable the consistency check 2023-03-22 10:53:39 +01:00
erik-krogh 4bc6a0927d
fix queries that relied on the old TreeSitter.qll 2023-03-22 10:45:50 +01:00
erik-krogh 53d9e4d4eb
QL: regen TreeSitter.qll 2023-03-22 10:29:30 +01:00
dependabot[bot] b7600c6022
Bump regex from 1.7.1 to 1.7.2 in /ql 
Bumps [regex](https://github.com/rust-lang/regex) from 1.7.1 to 1.7.2.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.7.1...1.7.2)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-22 04:06:21 +00:00
dependabot[bot] 7420e90a46
Bump serde from 1.0.157 to 1.0.158 in /ql 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.157 to 1.0.158.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.157...v1.0.158)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-21 04:06:18 +00:00
Edward Minnix III 9aa83d78e1
Merge pull request #12575 from egregius313/egregius313/ql/dataflow-naming-convention-check 
QL: add a check to enforce naming convention for new `DataFlow::ConfigSig` modules
 2023-03-20 07:26:01 -04:00
dependabot[bot] 9b3b6632fc
Bump serde from 1.0.156 to 1.0.157 in /ql 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.156 to 1.0.157.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.156...v1.0.157)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-20 04:09:27 +00:00
Ed Minnix d743b31ab6 Fix typo in QLdoc 2023-03-19 13:45:46 -04:00
Ed Minnix 00267637eb Implementation of check for DataFlow naming convention 2023-03-17 15:47:15 -04:00
Erik Krogh Kristensen be8f04a997
Merge pull request #12525 from github/dependabot/cargo/ql/serde-1.0.156 
Bump serde from 1.0.155 to 1.0.156 in /ql
 2023-03-16 10:36:11 +01:00
dependabot[bot] f811436cff
Bump serde from 1.0.155 to 1.0.156 in /ql 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.155 to 1.0.156.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.155...v1.0.156)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-15 04:05:38 +00:00
dependabot[bot] df45ba0476
Bump chrono from 0.4.23 to 0.4.24 in /ql 
Bumps [chrono](https://github.com/chronotope/chrono) from 0.4.23 to 0.4.24.
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.23...v0.4.24)

---
updated-dependencies:
- dependency-name: chrono
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-13 12:25:21 +00:00
dependabot[bot] de84dddfc1
Merge pull request #12495 from github/dependabot/cargo/ql/serde-1.0.155 2023-03-13 11:32:03 +00:00
Erik Krogh Kristensen 25e6b976c8
Merge pull request #12405 from github/dependabot/cargo/ql/rayon-1.7.0 
Bump rayon from 1.6.1 to 1.7.0 in /ql
 2023-03-13 10:57:11 +01:00
dependabot[bot] 7ab3bb1239
Bump serde from 1.0.154 to 1.0.155 in /ql 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.154 to 1.0.155.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.154...v1.0.155)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-13 04:10:45 +00:00
dependabot[bot] dd3e357ad3
Bump serde from 1.0.152 to 1.0.154 in /ql 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.152 to 1.0.154.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.152...v1.0.154)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-09 12:30:57 +00:00
dependabot[bot] ce5e76a3a0
Bump serde_json from 1.0.93 to 1.0.94 in /ql 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.93 to 1.0.94.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.93...v1.0.94)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-06 09:32:26 +00:00
dependabot[bot] d34d7e51e5
Bump rayon from 1.6.1 to 1.7.0 in /ql 
Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/rayon-rs/rayon/releases)
- [Changelog](https://github.com/rayon-rs/rayon/blob/master/RELEASES.md)
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.6.1...rayon-core-v1.7.0)

---
updated-dependencies:
- dependency-name: rayon
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-06 04:18:21 +00:00
Mathias Vorreiter Pedersen 1dd95a61c1
Merge pull request #12292 from github/calumgrant/aggregate-domain 
Query and tests for sum without domain
 2023-02-27 14:19:20 +00:00
Mathias Vorreiter Pedersen c9f8ebd620 QL: Remove redundant conjunct in aggregates. 2023-02-24 13:19:52 +00:00
Mathias Vorreiter Pedersen 375de59a14 QL: More fixes to the join-order query. 2023-02-24 12:44:17 +00:00
Calum Grant 10aad99e21 Add avg case 2023-02-24 11:02:07 +00:00
Mathias Vorreiter Pedersen 1f40518c78 QL: Fixup the join-order query. 2023-02-23 22:39:20 +00:00
Mathias Vorreiter Pedersen f0fe6fba88 QL: Accept test changes. 2023-02-23 22:25:04 +00:00
Mathias Vorreiter Pedersen b0e391cff0 QL: Extend the join order metric to cover recursive predicates. 2023-02-23 22:12:23 +00:00
Calum Grant 41d88a45d9 Fix merge 2023-02-23 21:02:43 +00:00
Calum Grant efa2647f09 Merge branch 'main' into calumgrant/qlql 2023-02-23 20:55:09 +00:00
Taus b993b5ef77
Merge pull request #12298 from MathiasVP/join-order-metric-query-with-more-rows 
QL: Output more rows in the join order query
 2023-02-23 20:31:43 +01:00
Mathias Vorreiter Pedersen 9ee078d1f2 QL: More column information. 2023-02-23 19:17:22 +00:00
Calum Grant dde18de2d1 Fixes 2023-02-23 19:03:05 +00:00
Calum Grant 196dbd3a33 Exploratory query to test the API 2023-02-23 19:01:52 +00:00
Calum Grant 77871e287d Use RAExpr 2023-02-23 18:35:24 +00:00
Calum Grant e368b8f72a Add classes and predicates to StructuredLogs 2023-02-23 17:48:21 +00:00
Mathias Vorreiter Pedersen 229e291e1b QL: Fix naming. 2023-02-23 17:34:07 +00:00
Mathias Vorreiter Pedersen dcc9b66aae Merge branch 'main' into visit-recursive-evaluation 2023-02-23 17:16:47 +00:00
Mathias Vorreiter Pedersen 9c8b8dff88 QL: Output more rows in the join order query. 2023-02-23 17:07:27 +00:00
Mathias Vorreiter Pedersen 48bf15f79c
Merge pull request #12291 from github/calumgrant/slow-predicates 
Slow predicates query
 2023-02-23 16:41:39 +00:00
Mathias Vorreiter Pedersen 858b3de547 Merge branch 'main' into join-order-metric-query 2023-02-23 15:54:38 +00:00
Mathias Vorreiter Pedersen 23b9abcbbf QL: Add a query for finding the predicates with the highest tuple sums. 2023-02-23 15:53:32 +00:00
Mathias Vorreiter Pedersen 7595c1c306 QL: Add a visitor for traversing recursive evaluations. 2023-02-23 15:53:32 +00:00
Taus d48938d168
Merge branch 'main' into calumgrant/slow-predicates 2023-02-23 16:53:04 +01:00
Taus 38ca4a8d3d QL: Remove unused predicates 2023-02-23 15:25:38 +00:00
Mathias Vorreiter Pedersen d7d9bea5e8 QL: Add a query for computing the join order metric for non-recursive predicates. 2023-02-23 14:27:39 +00:00
Mathias Vorreiter Pedersen d734982e7b
Merge pull request #12286 from github/tausbn/ql-add-a-bunch-of-convenience-predicates 
QL: Add predicates for timestamps and locations
 2023-02-23 12:45:46 +00:00
Calum Grant fccf2d705e Add the expected file 2023-02-23 12:25:29 +00:00
Calum Grant 6cf575df78 Query and tests for sum without domain 2023-02-23 12:19:25 +00:00
Calum Grant 564d7c0d53 Fix bug 2023-02-23 10:22:18 +00:00
Calum Grant eb553266ae Add this. 2023-02-23 09:51:29 +00:00
Calum Grant 58563744d6 A simple query 2023-02-23 09:50:09 +00:00
Taus 6a32a3ae58 QL: Add predicates for timestamps and locations 2023-02-22 22:47:51 +00:00
Mathias Vorreiter Pedersen 24935c97bc
Merge pull request #12285 from github/calumgrant/ql-ra-parser 
RA parser first draft
 2023-02-22 19:07:03 +00:00
Calum Grant 0fdcf0338a Tidy up warnings 2023-02-22 17:02:49 +00:00
Calum Grant f3e5a8f90f Minor tidy 2023-02-22 17:01:07 +00:00
Calum Grant 9980756ee8 RA parser first draft 2023-02-22 16:51:16 +00:00
Mathias Vorreiter Pedersen 498d0c359e QL: Convert various int getters to float (to avoid overflow) and correctly handle '-1' padding. 2023-02-22 14:54:40 +00:00
Mathias Vorreiter Pedersen b738c2684b
Merge pull request #12279 from MathiasVP/kind-predicate-logs 
QL: Start of the AST for `kind: predicates` evaluator logs
 2023-02-22 14:25:11 +00:00
Mathias Vorreiter Pedersen d64d03ec48 QL: Fix Code Scanning warning. 2023-02-22 14:15:47 +00:00
Mathias Vorreiter Pedersen f155f19725 QL: Respond to comments. 2023-02-22 14:15:18 +00:00
Taus 2cdec47585 QL: Make the JSON parser a bit more robust 
Updates the grammar to allow trailing commas in objects and arrays.

Also bumps the file size limit to 10MB.
 2023-02-22 13:45:47 +00:00
Mathias Vorreiter Pedersen 161acf0ebe QL: Add more getters. 2023-02-22 13:43:51 +00:00
Mathias Vorreiter Pedersen 2c31d6863c QL: Start on the AST for kind: predicates evaluator logs. 2023-02-22 13:26:47 +00:00
Taus 5304fe2bcb QL: Clean up structured logs module 
Pushes it into an internal module and removes the abstract class.
 2023-02-22 11:07:48 +00:00
Taus a3a099cf56 QL: Add a few more methods 
Still need to implement something to encapsulate RA, link it up, etc.
 2023-02-21 21:27:17 +00:00
Taus 729563c9a3 QL: Add preliminary support for structured logs 2023-02-21 21:09:34 +00:00
Taus cf734919b9 QL: Fix bad string grammar 
What was there before made it so that you couldn't actually extract the
contents of a string.
 2023-02-21 20:20:58 +00:00
Taus bab53b5736 QL: Fix JSON extraction 
I had forgotten about this extra filtering that takes place in the
extractor.
 2023-02-21 19:50:27 +00:00
Taus b5ebd1a0fd QL: Add JSON (+C/L) extraction 2023-02-21 12:59:30 +00:00
erik-krogh db9a0d1c52
make the deprecation query calculate based on months, and adjust the cutoff to 14 months 2023-02-18 12:39:16 +01:00
erik-krogh 1a308316c6
fix join-order of ql/outdated-deprecation 2023-02-18 12:28:06 +01:00
erik-krogh fcff18aa3c
add query header for OutdatedDeprecations 2023-02-18 12:22:34 +01:00
Taus 9f4f7a76c9 QL: Add query for outdated deprecations 2023-02-17 14:27:15 +00:00
Taus db748fae6b QL: Integrate blame parser into extractor 2023-02-17 13:22:18 +00:00
Taus 59c1cfb43a QL: Add grammar for parsing blame files 2023-02-17 13:21:44 +00:00
Taus 0e0ec89e60 QL: Add tool for extracting blame info 
I had some trouble getting this to work with version 1.54 of the Rust
toolchain, so I had to bump it up to 1.59.
 2023-02-17 13:20:06 +00:00
dependabot[bot] 5e2f9e1568
build(deps): bump serde_json from 1.0.92 to 1.0.93 in /ql 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.92 to 1.0.93.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.92...v1.0.93)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-09 03:09:08 +00:00
dependabot[bot] 33e8414fc4
build(deps): bump serde_json from 1.0.91 to 1.0.92 in /ql 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.91 to 1.0.92.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.91...v1.0.92)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-06 03:29:59 +00:00
dependabot[bot] 373148decd
Bump tracing from 0.1.35 to 0.1.37 in /ql 
Bumps [tracing](https://github.com/tokio-rs/tracing) from 0.1.35 to 0.1.37.
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-0.1.35...tracing-0.1.37)

---
updated-dependencies:
- dependency-name: tracing
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-01 03:11:28 +00:00
dependabot[bot] 597c71011e
Bump tracing-subscriber from 0.3.15 to 0.3.16 in /ql 
Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing) from 0.3.15 to 0.3.16.
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.15...tracing-subscriber-0.3.16)

---
updated-dependencies:
- dependency-name: tracing-subscriber
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-31 13:09:13 +00:00
dependabot[bot] 8410e46067
Bump flate2 from 1.0.24 to 1.0.25 in /ql 
Bumps [flate2](https://github.com/rust-lang/flate2-rs) from 1.0.24 to 1.0.25.
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](https://github.com/rust-lang/flate2-rs/compare/1.0.24...1.0.25)

---
updated-dependencies:
- dependency-name: flate2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-31 12:48:10 +00:00
dependabot[bot] 423bab54d3
Bump num_cpus from 1.13.1 to 1.14.0 in /ql 
Bumps [num_cpus](https://github.com/seanmonstar/num_cpus) from 1.13.1 to 1.14.0.
- [Release notes](https://github.com/seanmonstar/num_cpus/releases)
- [Changelog](https://github.com/seanmonstar/num_cpus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/seanmonstar/num_cpus/compare/v1.13.1...v1.14.0)

---
updated-dependencies:
- dependency-name: num_cpus
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-31 12:05:11 +00:00
dependabot[bot] 198b97ca8d
Bump serde from 1.0.140 to 1.0.152 in /ql 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.140 to 1.0.152.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.140...v1.0.152)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-31 11:48:44 +00:00
dependabot[bot] 807b715320
Bump tree-sitter from 0.20.8 to 0.20.9 in /ql 
Bumps [tree-sitter](https://github.com/tree-sitter/tree-sitter) from 0.20.8 to 0.20.9.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](https://github.com/tree-sitter/tree-sitter/commits)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-31 11:27:40 +00:00
dependabot[bot] e3afb1640a
Bump regex from 1.6.0 to 1.7.1 in /ql 
Bumps [regex](https://github.com/rust-lang/regex) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.6.0...1.7.1)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-30 11:19:30 +00:00
dependabot[bot] f430e83fca
Bump serde_json from 1.0.82 to 1.0.91 in /ql 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.82 to 1.0.91.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.82...v1.0.91)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-30 10:36:14 +00:00
erik-krogh 54c4c23b46
support the NewEntity module in QL-for-QL 2023-01-30 10:34:06 +01:00
erik-krogh 5a4fe71529
Revert "update clap to 3.0 in QL-for-QL" 
This reverts commit d072ed969e.
 2023-01-17 12:38:30 +01:00
Erik Krogh Kristensen 50b9f5bba0
Merge pull request #11892 from erik-krogh/clap 
QL: update clap to 3.0 in QL-for-QL
 2023-01-17 12:33:18 +01:00
erik-krogh 587adea809
QL: add --working-dir to qltest.cmd to fix qltest 2023-01-16 15:37:14 +01:00
erik-krogh 1d62751e15
test QL-for-QL on mac/win 2023-01-16 15:36:55 +01:00
erik-krogh d072ed969e
update clap to 3.0 in QL-for-QL 2023-01-16 12:34:56 +01:00
erik-krogh 6914e9a17a
Merge branch 'main' into atorralba/ql/omittable-exists 2023-01-11 13:09:38 +01:00
Tony Torralba ecf568629b Add ExprAggregate as a negative edge in getConjunctionParentRec 2023-01-11 09:41:16 +01:00
Tony Torralba ae8c75ac97 Generalize ConjunctionParent 2023-01-10 16:08:42 +01:00
Tony Torralba f6c3f77602 QL: Remove omittable exists variables 2023-01-10 13:37:58 +01:00
yoff c01ce955ba
Merge pull request #11778 from yoff/shared/inline-tests 
Shared: Inline test expectations
 2023-01-09 13:21:18 +01:00
Rasmus Lerchedahl Petersen c3b3c05cf3 Revert "Merge pull request #37 from erik-krogh/shared/inline-tests" 
This reverts commit 65fe9abcfe, reversing
changes made to 08e9d3391f.
 2023-01-05 09:19:43 +01:00
Henry Mercer b96160f0f3
Merge pull request #11783 from github/henrymercer/specify-baseline-languages 
Specify language names in extractor packs
 2023-01-04 10:42:18 +00:00
Erik Krogh Kristensen cedc9c0bff
Merge pull request #11582 from erik-krogh/heuristics 
JS: Add experimental variants of common security queries with more sources
 2023-01-04 10:46:19 +01:00
erik-krogh 9e63390c78
fix that ql/cand-missing-nomagic had a catastrophic join-order 2022-12-23 21:20:30 +01:00
Erik Krogh Kristensen 393a8c2bd8
Merge pull request #11630 from erik-krogh/useInstanceOf 
QL4QL: enable medium precision queries, and make the "suggest instanceof" query louder
 2022-12-23 14:22:23 +01:00
Henry Mercer 6be790929d Specify language names in extractor packs 2022-12-23 13:15:04 +00:00
Tony Torralba 36ca97e4f6 Add exclusions to reduce FP 
Predicate parameters that have a database type are excluded.

Also, uses of the exists variable in an agreggation or another quantifier are excluded.
 2022-12-22 11:15:07 +01:00
erik-krogh b3dd50bc36
inline Location into the shared implementation of InlineExpectationsTest 2022-12-22 11:09:43 +01:00
Rasmus Lerchedahl Petersen f28eb6bf31 ql4ql: use shared inline tests 
- add util shared pack to ql
 - remove from identical-files
 2022-12-22 10:20:07 +01:00
erik-krogh 38bd4d9b12
update expected output to have more copies of "T" 2022-12-21 21:45:59 +01:00
erik-krogh dbdc7275fc
have unique parents, also for mock AST nodes 2022-12-21 21:38:52 +01:00
erik-krogh 5728e3ee8f
Merge branch 'main' into equiv 2022-12-21 21:28:32 +01:00
Tony Torralba 7d0018c897
Update ql/ql/src/queries/style/OmittableExists.ql 2022-12-21 17:16:34 +01:00
Tony Torralba ac0c42c5c6 Apply suggestions from code review 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
 2022-12-21 16:16:58 +01:00
Tony Torralba 227e099854 Apply code review suggestions 
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
 2022-12-21 12:40:29 +01:00
Tony Torralba aa1d49cb95 Add OmittableExists QL-for-QL query 2022-12-21 12:26:58 +01:00
erik-krogh ab9855e196
fix `getAnnotation()` for new-type branches with parameters 2022-12-20 15:55:54 +01:00
erik-krogh 57f429ec5d
change this = this to any() 2022-12-20 13:56:25 +01:00
Erik Krogh Kristensen 0cc3232c10
fix typo 
Co-authored-by: Arthur Baars <aibaars@github.com>
 2022-12-20 13:56:25 +01:00
erik-krogh 0e426090f2
update expected output 2022-12-20 13:56:23 +01:00
erik-krogh 605bfd6e93
move the "I don't care about parent relation on mocks" hack into the predicate, so the tests dont fail 2022-12-20 13:55:49 +01:00
erik-krogh 54072d29f1
add explicit this 2022-12-20 13:55:49 +01:00
erik-krogh 49277f553f
model the last parts of the EquivalenceRelation module 2022-12-20 13:55:49 +01:00
erik-krogh a11e618cfc
mock parameters 2022-12-20 13:55:49 +01:00
erik-krogh 4feb48ce5f
classless predicate, used to model the edgeSig predicate 2022-12-20 13:55:49 +01:00
erik-krogh 4dc52379ad
add a mock TypeExpr, and use it 2022-12-20 13:55:49 +01:00
erik-krogh 5db2f0aba0
mock classes, and add a Mock T class to QlBuiltins 2022-12-20 13:55:49 +01:00
erik-krogh b7e0d1f8b3
don't include mock Ast nodes in PrintAst.ql 2022-12-20 13:55:49 +01:00
erik-krogh 51d5e881de
add an Ast mocking library, and use it to create mocks of the QlBuiltins and EquivalenceRelation modules 2022-12-20 13:55:48 +01:00
erik-krogh 0ca38faa4d
add test of buildins 2022-12-20 13:54:38 +01:00
Erik Krogh Kristensen 073e9bc52f
Merge pull request #11173 from erik-krogh/notDead 
QL: improve the dead-code query
 2022-12-20 13:36:58 +01:00
Erik Krogh Kristensen b1e6a86a4b
Merge pull request #11757 from erik-krogh/treesitter-qldoc 
QL/RB: make top TreeSitter.qll comment into a qldoc
 2022-12-20 13:36:31 +01:00
erik-krogh 2ff23a6fc0
make top TreeSitter.qll comment into a qldoc 2022-12-20 11:39:06 +01:00
Arthur Baars c8255770bc QL: fix visibility of module parameters 2022-12-20 11:22:20 +01:00
Arthur Baars bad5c65144 Add test 2022-12-20 10:37:57 +01:00