Merge pull request #311 from owen-mc/add-missing-change-notes

max-schaefer · web-flow · commit 34d5e970ffc3 · 2020-08-26T11:21:00.000+01:00
Add missing change notes
diff --git a/change-notes/2020-04-30-syscall-functions.md b/change-notes/2020-04-30-syscall-functions.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* The query "Command built from user-controlled sources" has been improved to recognize methods from the `syscall` library, which may lead to more alerts.
diff --git a/change-notes/2020-05-20-request-forgery-sanitizers.md b/change-notes/2020-05-20-request-forgery-sanitizers.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* The query "Uncontrolled data used in network request" is now more precise, which may reduce the number of false positives.
diff --git a/change-notes/2020-06-19-switch-block-without-test.md b/change-notes/2020-06-19-switch-block-without-test.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* A bug has been fixed that could cause the incorrect analysis of control flow around switch statements.
diff --git a/change-notes/2020-06-26-taint-model-tar-zip.md b/change-notes/2020-06-26-taint-model-tar-zip.md
@@ -0,0 +1,3 @@
+lgtm,codescanning
+* Modeling of the `archive/tar` and `archive/zip` packages has been added, which may lead to more
+  results from the security queries.
diff --git a/change-notes/2020-07-06-repo-with-file-url-origin.md b/change-notes/2020-07-06-repo-with-file-url-origin.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* A bug has been fixed that caused the autobuilder to not work on repositories with a `file://` URL as `origin`.

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+lgtm,codescanning`
	`2`	+* The query "Command built from user-controlled sources" has been improved to recognize methods from the `syscall` library, which may lead to more alerts.
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+lgtm,codescanning`
	`2`	`+* The query "Uncontrolled data used in network request" is now more precise, which may reduce the number of false positives.`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+lgtm,codescanning`
	`2`	`+* A bug has been fixed that could cause the incorrect analysis of control flow around switch statements.`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+lgtm,codescanning`
	`2`	+* Modeling of the `archive/tar` and `archive/zip` packages has been added, which may lead to more
	`3`	`+ results from the security queries.`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+lgtm,codescanning`
	`2`	+* A bug has been fixed that caused the autobuilder to not work on repositories with a `file://` URL as `origin`.