Commits

Breadcrumbs

History for

onworkflow/go-version-update

User selector

All users

All time

Commit History

Commits on May 8, 2026

• Note that common standard library types can be vulnerable to gadget-chain attacks

  owen-mc

  committed
  a5ef036

  Copy full SHA for a5ef036

Commits on May 7, 2026

• Do not make such a strong security claim

  Show description for f2ea3b9
  

  owen-mc

  and

  Copilot

  authored
  f2ea3b9

  Copy full SHA for f2ea3b9

• Clarify that deserialization that follows a schema is safe

  owen-mc

  committed
  427b73e

  Copy full SHA for 427b73e

• Remove double spaces from qhelp

  owen-mc

  committed
  7aa3fd8

  Copy full SHA for 7aa3fd8

Commits on Mar 13, 2026

• Change @security-severity for log injection queries from 7.8 to 6.1

  owen-mc

  committed
  056aa34

  Copy full SHA for 056aa34

• Change @security-severity for XSS queries from 6.1 to 7.8

  owen-mc

  committed
  f58a6e5

  Copy full SHA for f58a6e5

Commits on Mar 4, 2026

• Java: Inline expectation should have space after $

  Show description for ef345a3
  owen-mc

  committed
  ef345a3

  Copy full SHA for ef345a3

Commits on Feb 16, 2026

• Fix places which already dealt with both javax and jakarta

  owen-mc

  committed
  3184090

  Copy full SHA for 3184090

• Replace "javax" with `javaxOrJakarta()`

  Show description for a5e6f6d
  owen-mc

  committed
  a5e6f6d

  Copy full SHA for a5e6f6d

Commits on Feb 4, 2026

• Java: Rename ReturnStmt.getResult to getExpr.

  aschackmull

  committed
  6f40ac1

  Copy full SHA for 6f40ac1

• Java: Rename UnaryExpr.getExpr to getOperand.

  aschackmull

  committed
  5e6e64b

  Copy full SHA for 5e6e64b

Commits on Dec 3, 2025

• Use flowFrom.

  aschackmull

  committed
  dc6d3fe

  Copy full SHA for dc6d3fe

Commits on Nov 28, 2025

• Improve formatting of tags #2

  owen-mc

  committed
  220fd08

  Copy full SHA for 220fd08

Commits on Oct 22, 2025

• Java: Lower security-severity for Insecure Cookie query to 4.0

  Napalys

  committed
  91b0aaa

  Copy full SHA for 91b0aaa

• CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

  Napalys

  committed
  fa47174

  Copy full SHA for fa47174

Commits on Oct 17, 2025

• Merge pull request #20603 from owen-mc/update-broken-algo-qhelp

  Show description for 66f95bc
  owen-mc

  authored
  66f95bc

  Copy full SHA for 66f95bc

Commits on Oct 14, 2025

• Review suggestions - update comments and description

  joefarebrother

  committed
  d8b37d0

  Copy full SHA for d8b37d0

Commits on Oct 13, 2025

• Update comments

  joefarebrother

  committed
  093b04f

  Copy full SHA for 093b04f

• Update tests and add inline expectations

  joefarebrother

  committed
  c799f93

  Copy full SHA for c799f93

• Update documentation, rename things and add more comments to explain how the implementation works, remove filter for test code (prefer to filter in code scanning ui than in query logic)

  joefarebrother

  committed
  e1cf3d3

  Copy full SHA for e1cf3d3

• Copy experimental query to main

  joefarebrother

  committed
  54aefe0

  Copy full SHA for 54aefe0

Commits on Oct 8, 2025

• Improve qhelp for broken crypto algo queries

  Show description for 0bcdb91
  owen-mc

  committed
  0bcdb91

  Copy full SHA for 0bcdb91

Commits on Aug 26, 2025

• Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion

  jcogs33

  authored
  3675e4b

  Copy full SHA for 3675e4b

Commits on Jul 21, 2025

• Merge pull request #20018 from owen-mc/java/snakeyaml-safe-unsafe-deserialization

  Show description for 472a6b5
  owen-mc

  authored
  472a6b5

  Copy full SHA for 472a6b5

• Merge pull request #20077 from d10c/d10c/diff-informed-phase-3-java

  Show description for fbee6bb
  d10c

  authored
  fbee6bb

  Copy full SHA for fbee6bb

Commits on Jul 19, 2025

• Java: remove version debugging from alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0dd33b2

  Copy full SHA for 0dd33b2

Commits on Jul 18, 2025

• Java: rename to align with 'java/spring-boot-exposed-actuators' query

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  70d5150

  Copy full SHA for 70d5150

• Java: adjust metadata and alert msg

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ea529b0

  Copy full SHA for ea529b0

• Java: minor refactoring

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7d5e939

  Copy full SHA for 7d5e939

• Java: update qhelp

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  afa6610

  Copy full SHA for afa6610

Commits on Jul 17, 2025

• Java: add related location to alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0d2a422

  Copy full SHA for 0d2a422

• Java: fix test case for version 1.4

  Show description for 2bfc4b4
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2bfc4b4

  Copy full SHA for 2bfc4b4

• Java: move code to .qll file

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  1b90a30

  Copy full SHA for 1b90a30

• Java: remove deprecation

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  38260e7

  Copy full SHA for 38260e7

• Java: copy out of experimental

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  a39cb40

  Copy full SHA for a39cb40