Skip to content

Commit 81edb47

Browse files
geoffw0geoffw0
committed
Merge branch 'main' into constcrypto
2 parents 704b385 + a2851f7 commit 81edb47

File tree

2,059 files changed

+36353
-24682
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

2,059 files changed

+36353
-24682
lines changed

‎.github/codeql/codeql-config.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,13 @@ queries:
44
- uses: security-and-quality
55

66
paths-ignore:
7+
- '/actions/ql/test'
78
- '/cpp/'
89
- '/java/'
910
- '/python/'
1011
- '/javascript/ql/test'
12+
- '/javascript/ql/integration-tests'
1113
- '/javascript/extractor/tests'
14+
- '/javascript/extractor/parser-tests'
15+
- '/javascript/ql/src/'
1216
- '/rust/ql'

‎.github/workflows/codeql-analysis.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,10 @@ on:
1818

1919
jobs:
2020
CodeQL-Build:
21+
strategy:
22+
fail-fast: false
23+
matrix:
24+
language: ['actions', 'csharp']
2125

2226
runs-on: ubuntu-latest
2327

@@ -38,9 +42,8 @@ jobs:
3842
# Initializes the CodeQL tools for scanning.
3943
- name: Initialize CodeQL
4044
uses: github/codeql-action/init@main
41-
# Override language selection by uncommenting this and choosing your languages
4245
with:
43-
languages: csharp
46+
languages: ${{ matrix.language }}
4447
config-file: ./.github/codeql/codeql-config.yml
4548

4649
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).

‎Cargo.lock

Lines changed: 2 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎MODULE.bazel

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,7 @@ use_repo(
7373
tree_sitter_extractors_deps,
7474
"vendor_ts__anyhow-1.0.96",
7575
"vendor_ts__argfile-0.2.1",
76+
"vendor_ts__chalk-ir-0.99.0",
7677
"vendor_ts__chrono-0.4.39",
7778
"vendor_ts__clap-4.5.31",
7879
"vendor_ts__dunce-1.0.5",
@@ -94,6 +95,7 @@ use_repo(
9495
"vendor_ts__ra_ap_hir-0.0.266",
9596
"vendor_ts__ra_ap_hir_def-0.0.266",
9697
"vendor_ts__ra_ap_hir_expand-0.0.266",
98+
"vendor_ts__ra_ap_hir_ty-0.0.266",
9799
"vendor_ts__ra_ap_ide_db-0.0.266",
98100
"vendor_ts__ra_ap_intern-0.0.266",
99101
"vendor_ts__ra_ap_load-cargo-0.0.266",

‎actions/ql/src/Security/CWE-077/EnvPathInjectionCritical.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name PATH Enviroment Variable built from user-controlled sources
2+
* @name PATH environment variable built from user-controlled sources
33
* @description Building the PATH environment variable from user-controlled sources may alter the execution of following system commands
44
* @kind path-problem
55
* @problem.severity error

‎actions/ql/src/Security/CWE-077/EnvPathInjectionMedium.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name PATH Enviroment Variable built from user-controlled sources
2+
* @name PATH environment variable built from user-controlled sources
33
* @description Building the PATH environment variable from user-controlled sources may alter the execution of following system commands
44
* @kind path-problem
55
* @problem.severity error

‎actions/ql/src/Security/CWE-077/EnvVarInjectionCritical.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name Enviroment Variable built from user-controlled sources
2+
* @name Environment variable built from user-controlled sources
33
* @description Building an environment variable from user-controlled sources may alter the execution of following system commands
44
* @kind path-problem
55
* @problem.severity error

‎actions/ql/src/Security/CWE-077/EnvVarInjectionMedium.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name Enviroment Variable built from user-controlled sources
2+
* @name Environment variable built from user-controlled sources
33
* @description Building an environment variable from user-controlled sources may alter the execution of following system commands
44
* @kind path-problem
55
* @problem.severity error

‎actions/ql/src/Security/CWE-829/ArtifactPoisoningCritical.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
The following example, correctly creates a temporary directory and extracts the contents of the artifact there before calling `cmd.sh`.
4444

4545
```yaml
46-
name: Insecure Workflow
46+
name: Secure Workflow
4747
4848
on:
4949
workflow_run:

‎actions/ql/src/Security/CWE-829/ArtifactPoisoningMedium.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
The following example, correctly creates a temporary directory and extracts the contents of the artifact there before calling `cmd.sh`.
4444

4545
```yaml
46-
name: Insecure Workflow
46+
name: Secure Workflow
4747
4848
on:
4949
workflow_run:

0 commit comments

Comments
 (0)