GitHub / microsoft/codeql / commits
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| b764c433 | merge Merge pull request #346 from microsoft/users/chanely/insecure-random |
Mathias Vorreiter Pedersen <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| b48624a7 | dummy commit so mathisa can approve tihs PR | chanelyoung <c****g@m****m> | about 1 month ago | |
| 35418cda | PS: Dont hardcode 'true' in 'nodeIsHidden', and accept test changes. | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 344d1d87 | merge Merge branch 'main' into users/chanely/insecure-random | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 97891387 | PS: Accept test changes. | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 5cb8741f | PS: Add tests with missing flow sources. | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 72210e26 | PS: Accept test changes. | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 670e7ca3 | PS: Generalize TypeNameNode to support New-Object string arguments. | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 4df918d1 | merge Merge pull request #376 from microsoft/make-iac-folder-local |
Chanel <1****y@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 781760eb | add extract arg | chanelyoung <c****g@m****m> | about 1 month ago | |
| aa789f2a |
Set warnOnImplicitThis: true for iac QL packs
Co-authored-by: Copilot <2****t@u****m> |
chanelyoung <c****g@m****m> | about 1 month ago | |
| 2baef0e7 |
Add CommentBase to iac YAML.qll for codeql/yaml@1.0.52 compatibility
Co-authored-by: Copilot <2****t@u****m> |
chanelyoung <c****g@m****m> | about 1 month ago | |
| bb35f32f |
Clean up standalone-repo artifacts from inlined iac/
Co-authored-by: Copilot <2****t@u****m> |
chanelyoung <c****g@m****m> | about 1 month ago | |
| 6bbf1715 |
Replace iac git submodule with inline source (v0.5.1, e389dc1)
Co-authored-by: Copilot <2****t@u****m> |
chanelyoung <c****g@m****m> | about 1 month ago | |
| 2f6dedbb | merge Merge pull request #373 from microsoft/iac-submodule-bump |
Chanel <1****y@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| f24c7908 | iac submodule to 0.5.1 | chanelyoung <c****g@m****m> | about 1 month ago | |
| b16c2640 | merge Merge pull request #367 from microsoft/copilot/ps-deprecated-tls-precision-20... |
Mathias Vorreiter Pedersen <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 805b5725 | merge Merge branch 'main' into copilot/ps-deprecated-tls-precision-20260615 |
Lindsay Simpkins <L****s@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| aeec7fd7 | merge Merge pull request #368 from microsoft/copilot/ps-deserialization-precision-2... |
Chanel <1****y@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 2e9bc994 | PS: accept test changes. | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| 49517e48 | merge Merge branch 'main' into copilot/ps-deserialization-precision-20260615 | Mathias Vorreiter Pedersen <m****r@m****m> | about 1 month ago | |
| c9a0f039 | Update powershell/ql/src/queries/security/cwe-757/DeprecatedTls.ql |
Mathias Vorreiter Pedersen <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| e5268201 | merge Merge branch 'main' into copilot/ps-deprecated-tls-precision-20260615 |
Mathias Vorreiter Pedersen <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 7dbad991 | merge Merge pull request #372 from microsoft/auto/sync-main-pr |
Chanel <1****y@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 4cb6867a | merge Merge tag 'codeql-cli/latest' into auto/sync-main-pr | chanelyoung <c****g@m****m> | about 2 months ago | |
| 8d764325 | merge Merge pull request #370 from microsoft/fix-qlpack-name-in-powershell |
dilanbhalla <3****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 34ac97cf | merge Merge branch 'main' into fix-qlpack-name-in-powershell |
dilanbhalla <3****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| e4a7b4ff | merge Merge pull request #22109 from github/release-prep/2.26.0 |
Michael B. Gale <m****g@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 66ddf3b4 | Remove unnecessary changenote for the hotfix | Michael B. Gale <m****g@g****m> | about 2 months ago | |
| 1af9609e | Release preparation for version 2.26.0 | github-actions[bot] <g****s@g****m> | about 2 months ago | |
| 79eeaa20 | merge Merge pull request #22108 from hvitved/python-hot-fix |
Michael B. Gale <m****g@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| f4d6f582 | merge Merge pull request #22096 from github/revert-22059-release-prep/2.26.0 |
Michael B. Gale <m****g@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| d032d190 | merge Merge pull request #371 from microsoft/add-cwe-494-for-ps |
Mathias Vorreiter Pedersen <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 23089816 | Python: Update inline test expectations | Tom Hvitved <h****d@g****m> | about 2 months ago | |
| 32181cd7 | Python: Improve some flow summaries | Tom Hvitved <h****d@g****m> | about 2 months ago | |
| acbf8e13 | PS: Accept test changes. | Mathias Vorreiter Pedersen <m****r@m****m> | about 2 months ago | |
| b12c67f2 | merge Merge pull request #22092 from github/tausbn/python-hotfix-disable-instance-f... |
Taus <t****n@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 41f2e7b6 | Revert "Release preparation for version 2.26.0" |
Mario Campos <m****s@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| f251a572 | Python: hotfix - disable instanceFieldStep to avoid type-tracker blowup | Taus <t****n@g****m> | about 2 months ago | |
| 9bb98fed | PS: Accept test changes. | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| 067711ab | PS: Undo a change from f10abdaa35593fa5ff6d2a4b2ee84f9b6b9c5618 which causes ... | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| 3fc4217a | PS: Switch to taint-tracking (it was supposed to be taint-tracking all along)... | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| de1b9c0e | PS: Avoid calling 'toLowerCase' multiple times. | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| 067cac3f | added false negative cases, refactor to use classes instead of predicates, is... | Chanel Young <c****g@m****m> | 2 months ago | |
| f10abdaa | added additional test cases | Chanel Young <c****g@m****m> | 2 months ago | |
| 48744dae | PS: Add tests for CWE-494. | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| 5ecf5115 | PS: Add qhelp for CWE-494. | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| a607410e | PS: Add query for CWE-494. | Mathias Vorreiter Pedersen <m****r@m****m> | 2 months ago | |
| 7c73de0e | merge Merge pull request #22059 from github/release-prep/2.26.0 |
Mario Campos <m****s@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 237c5639 | Release preparation for version 2.26.0 | github-actions[bot] <g****s@g****m> | 2 months ago | |
| 73ad826d | merge Merge pull request #22016 from asgerf/commonast-rebased5 |
Asger F <a****f@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| cc83856c | merge Merge pull request #22058 from github/codeql-cli-2.25.6 |
Michael B. Gale <m****g@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 0fbab225 | merge Merge pull request #22056 from geoffw0/codequal |
Geoffrey White <4****0@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 969ab782 | merge Merge pull request #22048 from github/jketema/kotlin1-pytest |
Jeroen Ketema <9****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| b67644c1 | merge Merge pull request #21986 from JarLob/userpermissions |
Paolo Tranquilli <r****2@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| ca093273 | Rust: Remove more pointless imports. | Geoffrey White <4****0@u****m> | 2 months ago | |
| b582844f | merge Merge pull request #22049 from hvitved/csharp/dead-store-cleanup |
Tom Hvitved <h****d@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 20b4cbe7 | Rust: Remove pointless imports of codeql.util.Unit. | Geoffrey White <4****0@u****m> | 2 months ago | |
| 89cd6770 |
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <1****t@u****m> |
Asger F <a****f@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 9b2e6077 | Kotlin: Address review comments | Jeroen Ketema <j****a@g****m> | 2 months ago | |
| 929fa1e9 | C#: Remove redundant code from `DeadStoreOfLocal.ql` | Tom Hvitved <h****d@g****m> | 2 months ago | |
| 3324d079 | merge Merge pull request #22046 from github/mario-campos/mirror-maven-central/maven |
Mario Campos <m****s@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| f6b3d1ea | Kotlin: Remove unneeded pytest imports | Jeroen Ketema <j****a@g****m> | 2 months ago | |
| 402c0f89 | Kotlin: Update tests to use new `kotlin_2_3_20` fixture | Jeroen Ketema <j****a@g****m> | 2 months ago | |
| 7fc4b485 | Fix formatting | Jaroslav Lobačevski <j****b@g****m> | 2 months ago | |
| 4b8cb3ff |
Fix false negative for branching nested reusable workflows
Co-authored-by: Copilot <2****t@u****m> |
Paolo Tranquilli <r****2@g****m> | 2 months ago | |
| b8c78fdc | merge Merge pull request #21970 from github/andersfugmann/kotlin-2.4-v2 |
Jeroen Ketema <9****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| bcf71d0d | merge Merge pull request #22043 from github/copilot/tweak-ruby-ast-caseexpr |
Anders Schack-Mulligen <a****l@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 5047bee4 | Ruby: Adjust qldoc. | Anders Schack-Mulligen <a****l@g****m> | 2 months ago | |
| 29eba2f3 | merge Merge pull request #22017 from aschackmull/cfg/catchclause-pattern |
Anders Schack-Mulligen <a****l@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 4fa8a9fb | Synthesize true value for valueless Ruby CaseExpr |
copilot-swe-agent[bot] <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| a24d222d | merge Merge pull request #22011 from michaelnebel/csharp/removeafallback |
Michael Nebel <m****l@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| bcfee987 | Apply suggestion from @aschackmull |
Anders Schack-Mulligen <a****l@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| af11f6e6 | Use Maven Central mirror in Java Maven integration tests | Mario Campos <m****s@g****m> | 2 months ago | |
| 53cae687 | merge Merge pull request #21931 from github/yoff/python-shared-cfg-loop-else |
yoff <y****f@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| cfbf4a39 | merge Merge pull request #22037 from github/copilot/update-csharp-extractor-catch-c... |
Anders Schack-Mulligen <a****l@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 31f6e713 | Fix "The variable event is only used in one side of disjunct." | Jaroslav Lobačevski <j****b@g****m> | 2 months ago | |
| e2347a5c | Fix for independent checks | Jaroslav Lobačevski <j****b@g****m> | 2 months ago | |
| d26102b2 | merge Merge pull request #21920 from github/yoff/python-flow-py-namespace |
yoff <y****f@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 73ab3e68 |
Update shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Co-authored-by: Anders Schack-Mulligen <a****l@u****m> |
yoff <y****f@g****m> | 2 months ago | |
| f6dce466 | merge Merge pull request #22009 from geoffw0/rust-crypto |
Geoffrey White <4****0@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| cd23341d | merge Merge branch 'main' into andersfugmann/kotlin-2.4-v2 |
Jeroen Ketema <9****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| b254aa7e | C#: Extract catch(Ex) type as TypeAccess instead of TypeMention |
copilot-swe-agent[bot] <1****t@u****m>
Committed by: Anders Schack-Mulligen <a****l@g****m> |
2 months ago | |
| ec91865a | merge Merge pull request #22030 from github/idrissrio/cpp/update-stats-file |
Idriss Riouak <i****o@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| f0576046 | merge Merge pull request #22027 from owen-mc/go/improve-tests |
Owen Mansel-Chan <6****c@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 9e0e1bde | Rust: Use Copilot suggested comment phrasing. | Geoffrey White <4****0@u****m> | 2 months ago | |
| 8c24acc9 |
Fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <1****t@u****m> |
Geoffrey White <4****0@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 32f7c541 | merge Merge pull request #21919 from github/yoff/python-remove-getAFlowNode |
yoff <y****f@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| e1d4fe86 | C#: Accept test changes. | Anders Schack-Mulligen <a****l@g****m> | 2 months ago | |
| 8179bffe | merge Merge pull request #21930 from github/yoff/python-dataflow-noop-simplifications |
yoff <y****f@g****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 11725e89 | Java: Accept test changes. | Anders Schack-Mulligen <a****l@g****m> | 2 months ago | |
| 7197cc56 | merge Merge pull request #22014 from github/copilot/update-rescue-clause-exception-... |
Anders Schack-Mulligen <a****l@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 48b0cbcf | merge Merge pull request #22031 from github/copilot/tweak-csharp-extractor |
Anders Schack-Mulligen <a****l@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 18f49ed1 | C#: Fix spelling error. | Michael Nebel <m****l@g****m> | 2 months ago | |
| ac7ed061 | C#: Accept test change. | Anders Schack-Mulligen <a****l@g****m> | 2 months ago | |
| 5f316324 | C#: Move GetAllFeeds to the feed manager. | Michael Nebel <m****l@g****m> | 2 months ago | |
| 03187ae8 | merge Merge pull request #22013 from jketema/swift/more-arguments |
Jeroen Ketema <9****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| bd84fb31 | Add regression for catch type mention extraction |
copilot-swe-agent[bot] <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 4c9fa4dd | Emit catch type mentions without variables |
copilot-swe-agent[bot] <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 7d66ec0f | Ruby: Clarify AST. | Anders Schack-Mulligen <a****l@g****m> | 2 months ago |