Commits

History for

oncodeql-cli-2.26.3

Commits on Jun 23, 2025

JS: Remove js/actions/actions-artifact-leak
asgerf
committed
9dcb61e

Commits on Jan 27, 2025

fix example in clear-text-logging qhelp to actually be bad
erik-krogh
committed
37a1727

Commits on Nov 20, 2024

Merge branch 'main' into js/shared-dataflow-merge-main
asgerf
committed
d52bc97

Commits on Nov 5, 2024

fix: add "actions" tag to ActionsArtifactLeak
mbarbero
authored
881fe0b

Commits on Sep 18, 2024

Merge branch 'main' into js/shared-dataflow-merge-main
asgerf
committed
1cd00a1

Commits on Sep 6, 2024

fix: Use YamlScalar for booleans
Alvaro Muñoz
committed
5d1da86
Fix alert message
Alvaro Muñoz
committed
5df3af2
[javascript] Query to detect GITHUB_TOKEN leaked in artifacts
Alvaro Muñoz
committed
d9e8792

Commits on Oct 13, 2023

JS: Port BuildArtifactLeak
asgerf
committed
2296a27
JS: Port CleartextStorage
asgerf
committed
40d68cb
JS: Port CleartextLogging
asgerf
committed
b8a6f81

Commits on Feb 2, 2023

Update javascript/ql/src/Security/CWE-312/CleartextLogging.qhelp

knewbury01
and
erik-krogh
authored
231110d

Commits on Feb 1, 2023

Update JS CleartextLogging qhelp
knewbury01
committed
dc5eb40

Commits on Oct 7, 2022

fix some more style-guide violations in the alert-messages
erik-krogh
committed
368f847

Commits on Sep 6, 2022

update alert-messages of the sensitive data queries to match #10314
erik-krogh
committed
24f2e3c

Commits on Sep 5, 2022

make the alert messages of taint-tracking queries more consistent
erik-krogh
committed
aa56ca3

Commits on Nov 24, 2021

JS/PY: Remove CWE-315 form CleartextLogging
RasmusWL
committed
c05ffd4

Commits on Nov 10, 2021

add CWE-532 to the clear-text-logging query
erik-krogh
committed
5543465

Commits on Aug 12, 2021

JS: Migrate to *Query.qll convention
asgerf
committed
f6da030

Commits on Jun 15, 2021

Update security-severity scores
calumgrant
committed
771e686

Commits on Jun 10, 2021

Add security-severity metadata
calumgrant
committed
a594afb

Commits on Jun 17, 2020

add dot after bullet-point
erik-krogh
committed
69888f9

Commits on Jun 15, 2020

small corrections in documentation

erik-krogh
and
asgerf
authored
315faaf
qhelp
erik-krogh
committed
d2716c5

Commits on Jun 9, 2020

improve readability

erik-krogh
and
asgerf
authored
eb00da5
introduce basic BuildArtifactLeak query
erik-krogh
committed
be71ddf

Commits on Feb 8, 2019

JavaScript: Update qhelp example for `CleartextStorage`.
Max Schaefer
committed
aebc5bc

Commits on Jan 7, 2019

JavaScript: Autoformat all QL files.
Max Schaefer
committed
31bb39a

Commits on Nov 14, 2018

JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.
Max Schaefer
committed
3fcd02a
JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.
Max Schaefer
committed
52ae757
JavaScript: Select `source` and `sink` in all path queries.
Max Schaefer
committed
e365b72
JavaScript: Move from `Node` to `PathNode`.
Max Schaefer
committed
11d6259
JavaScript: Add `import DataFlow::PathGraph`.
Max Schaefer
committed
8d87f55
JavaScript: Make all taint-based security queries have `@kind path-problem`.
Max Schaefer
committed
60a1357
JavaScript: Refactor security queries for uniformity.
Max Schaefer
committed
65bcf0f