Commits

Breadcrumbs

History for

oncodeql-cli/v2.23.8

User selector

All users

All time

Commit History

Commits on Jun 23, 2025

• JS: Remove js/actions/command-injection

  Show description for 76b7228
  asgerf

  committed
  76b7228

  Copy full SHA for 76b7228

Commits on Oct 13, 2023

• JS: Port UnsafeDynamicMethodAccess

  asgerf

  committed
  7f4d42d

  Copy full SHA for 7f4d42d

• JS: Port UnsafeCodeConstruction

  asgerf

  committed
  32022cc

  Copy full SHA for 32022cc

• JS: Port ImproperCodeSanitization

  asgerf

  committed
  9128722

  Copy full SHA for 9128722

• JS: Port CodeInjection

  asgerf

  committed
  fcfab52

  Copy full SHA for fcfab52

Commits on Jun 20, 2023

• Single quote was preventing the shell from expanding the BODY variable

  Show description for 1508546
  tspascoal

  authored
  1508546

  Copy full SHA for 1508546

Commits on May 9, 2023

• Update javascript/ql/src/Security/CWE-094/ExpressionInjection.qhelp

  Show description for 5aa7135
  

  JarLob

  and

  asgerf

  authored
  5aa7135

  Copy full SHA for 5aa7135

Commits on Apr 21, 2023

• Use double curly braces

  JarLob

  committed
  6e9f54e

  Copy full SHA for 6e9f54e

Commits on Apr 14, 2023

• Move `actions/github-script` out of Actions.qll

  JarLob

  committed
  e9dee3a

  Copy full SHA for e9dee3a

• Extract `where` parts into predicates

  JarLob

  committed
  3724ea1

  Copy full SHA for 3724ea1

• Encapsulate github-script

  JarLob

  committed
  ac1c206

  Copy full SHA for ac1c206

• Encapsulate composite actions

  JarLob

  committed
  d80c541

  Copy full SHA for d80c541

Commits on Apr 13, 2023

• Make predicate name clearer

  JarLob

  committed
  9406576

  Copy full SHA for 9406576

• Use `YamlMapping` for modeling `Env`

  JarLob

  committed
  79218a3

  Copy full SHA for 79218a3

• Rename Env

  JarLob

  committed
  dd52ef8

  Copy full SHA for dd52ef8

Commits on Apr 6, 2023

• Fix warnings

  JarLob

  committed
  7573c61

  Copy full SHA for 7573c61

• Add support for composite actions

  JarLob

  committed
  9c7eecf

  Copy full SHA for 9c7eecf

Commits on Apr 5, 2023

• Improve documentation

  JarLob

  committed
  40635e6

  Copy full SHA for 40635e6

• Improve documentation

  JarLob

  committed
  9fba7d3

  Copy full SHA for 9fba7d3

• Change UI message

  JarLob

  committed
  eef1973

  Copy full SHA for eef1973

• Add simple taint tracking for env variables

  JarLob

  committed
  5c5b9f9

  Copy full SHA for 5c5b9f9

Commits on Apr 3, 2023

• Look for script injections in actions/github-script

  JarLob

  committed
  8ea4182

  Copy full SHA for 8ea4182

• fix formatting

  JarLob

  committed
  ba5747d

  Copy full SHA for ba5747d

• Add more sources, more unit tests, fixes to the GitHub Actions injection query

  JarLob

  committed
  99d634c

  Copy full SHA for 99d634c

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Oct 27, 2022

• Merge pull request #10727 from erik-krogh/js-last-msg

  Show description for bbdda9e
  erik-krogh

  authored
  bbdda9e

  Copy full SHA for bbdda9e

Commits on Oct 12, 2022

• spelling: the

  Show description for 9d6ea28
  jsoref

  committed
  9d6ea28

  Copy full SHA for 9d6ea28

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Sep 30, 2022

• JS/Python/Ruby: s/a HTML/an HTML/

  nickrolfe

  committed
  ed74e0a

  Copy full SHA for ed74e0a

Commits on Sep 12, 2022

• apply suggestions from doc review

  erik-krogh

  committed
  6ec03d4

  Copy full SHA for 6ec03d4

Commits on Sep 5, 2022

• make the alert messages of taint-tracking queries more consistent

  erik-krogh

  committed
  aa56ca3

  Copy full SHA for aa56ca3

Commits on Jul 13, 2022

• use small steps in TypeBackTracker correctly

  erik-krogh

  committed
  fd10947

  Copy full SHA for fd10947

Commits on May 17, 2022

• change @id from js/actions/injection to js/actions/command-injection

  erik-krogh

  committed
  2550988

  Copy full SHA for 2550988

Commits on May 12, 2022

• Merge remote-tracking branch 'origin/main' into nickrolfe/misspelling

  nickrolfe

  committed
  1115227

  Copy full SHA for 1115227

• JS: fix typos in comments

  nickrolfe

  committed
  2ed42c3

  Copy full SHA for 2ed42c3