Skip to content

Commit 894fc13

Browse files
NapalysNapalys
committed
Merge branch 'main' into js/port_firebase
2 parents 464cec9 + bab84d0 commit 894fc13

File tree

458 files changed

+17177
-1384
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

458 files changed

+17177
-1384
lines changed

‎actions/ql/integration-tests/query-suite/actions-code-quality.qls.expected‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+

‎actions/ql/integration-tests/query-suite/actions-code-scanning.qls.expected‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
ql/actions/ql/src/Security/CWE-077/EnvPathInjectionCritical.ql
2+
ql/actions/ql/src/Security/CWE-077/EnvVarInjectionCritical.ql
3+
ql/actions/ql/src/Security/CWE-094/CodeInjectionCritical.ql
4+
ql/actions/ql/src/Security/CWE-1395/UseOfKnownVulnerableAction.ql
5+
ql/actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql
6+
ql/actions/ql/src/Security/CWE-285/ImproperAccessControl.ql
7+
ql/actions/ql/src/Security/CWE-312/ExcessiveSecretsExposure.ql
8+
ql/actions/ql/src/Security/CWE-312/SecretsInArtifacts.ql
9+
ql/actions/ql/src/Security/CWE-312/UnmaskedSecretExposure.ql
10+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaCodeInjection.ql
11+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaDirectCache.ql
12+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaPoisonableStep.ql
13+
ql/actions/ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql
14+
ql/actions/ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql
15+
ql/actions/ql/src/Security/CWE-829/ArtifactPoisoningCritical.ql
16+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
17+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql

‎actions/ql/integration-tests/query-suite/actions-security-and-quality.qls.expected‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
ql/actions/ql/src/Debug/SyntaxError.ql
2+
ql/actions/ql/src/Security/CWE-077/EnvPathInjectionCritical.ql
3+
ql/actions/ql/src/Security/CWE-077/EnvPathInjectionMedium.ql
4+
ql/actions/ql/src/Security/CWE-077/EnvVarInjectionCritical.ql
5+
ql/actions/ql/src/Security/CWE-077/EnvVarInjectionMedium.ql
6+
ql/actions/ql/src/Security/CWE-094/CodeInjectionCritical.ql
7+
ql/actions/ql/src/Security/CWE-094/CodeInjectionMedium.ql
8+
ql/actions/ql/src/Security/CWE-1395/UseOfKnownVulnerableAction.ql
9+
ql/actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql
10+
ql/actions/ql/src/Security/CWE-285/ImproperAccessControl.ql
11+
ql/actions/ql/src/Security/CWE-312/ExcessiveSecretsExposure.ql
12+
ql/actions/ql/src/Security/CWE-312/SecretsInArtifacts.ql
13+
ql/actions/ql/src/Security/CWE-312/UnmaskedSecretExposure.ql
14+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaCodeInjection.ql
15+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaDirectCache.ql
16+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaPoisonableStep.ql
17+
ql/actions/ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql
18+
ql/actions/ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql
19+
ql/actions/ql/src/Security/CWE-571/ExpressionIsAlwaysTrueCritical.ql
20+
ql/actions/ql/src/Security/CWE-571/ExpressionIsAlwaysTrueHigh.ql
21+
ql/actions/ql/src/Security/CWE-829/ArtifactPoisoningCritical.ql
22+
ql/actions/ql/src/Security/CWE-829/ArtifactPoisoningMedium.ql
23+
ql/actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
24+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
25+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
26+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
27+
ql/actions/ql/src/Violations Of Best Practice/CodeQL/UnnecessaryUseOfAdvancedConfig.ql

‎actions/ql/integration-tests/query-suite/actions-security-extended.qls.expected‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
ql/actions/ql/src/Security/CWE-077/EnvPathInjectionCritical.ql
2+
ql/actions/ql/src/Security/CWE-077/EnvPathInjectionMedium.ql
3+
ql/actions/ql/src/Security/CWE-077/EnvVarInjectionCritical.ql
4+
ql/actions/ql/src/Security/CWE-077/EnvVarInjectionMedium.ql
5+
ql/actions/ql/src/Security/CWE-094/CodeInjectionCritical.ql
6+
ql/actions/ql/src/Security/CWE-094/CodeInjectionMedium.ql
7+
ql/actions/ql/src/Security/CWE-1395/UseOfKnownVulnerableAction.ql
8+
ql/actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql
9+
ql/actions/ql/src/Security/CWE-285/ImproperAccessControl.ql
10+
ql/actions/ql/src/Security/CWE-312/ExcessiveSecretsExposure.ql
11+
ql/actions/ql/src/Security/CWE-312/SecretsInArtifacts.ql
12+
ql/actions/ql/src/Security/CWE-312/UnmaskedSecretExposure.ql
13+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaCodeInjection.ql
14+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaDirectCache.ql
15+
ql/actions/ql/src/Security/CWE-349/CachePoisoningViaPoisonableStep.ql
16+
ql/actions/ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql
17+
ql/actions/ql/src/Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql
18+
ql/actions/ql/src/Security/CWE-829/ArtifactPoisoningCritical.ql
19+
ql/actions/ql/src/Security/CWE-829/ArtifactPoisoningMedium.ql
20+
ql/actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
21+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
22+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
23+
ql/actions/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql

‎actions/ql/integration-tests/query-suite/not_included_in_qls.expected‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
ql/actions/ql/src/Debug/partial.ql
2+
ql/actions/ql/src/Models/CompositeActionsSinks.ql
3+
ql/actions/ql/src/Models/CompositeActionsSources.ql
4+
ql/actions/ql/src/Models/CompositeActionsSummaries.ql
5+
ql/actions/ql/src/Models/ReusableWorkflowsSinks.ql
6+
ql/actions/ql/src/Models/ReusableWorkflowsSources.ql
7+
ql/actions/ql/src/Models/ReusableWorkflowsSummaries.ql
8+
ql/actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql
9+
ql/actions/ql/src/experimental/Security/CWE-078/CommandInjectionCritical.ql
10+
ql/actions/ql/src/experimental/Security/CWE-078/CommandInjectionMedium.ql
11+
ql/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.ql
12+
ql/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.ql
13+
ql/actions/ql/src/experimental/Security/CWE-200/SecretExfiltration.ql
14+
ql/actions/ql/src/experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
15+
ql/actions/ql/src/experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
16+
ql/actions/ql/src/experimental/Security/CWE-829/UnversionedImmutableAction.ql
17+
ql/actions/ql/src/experimental/Security/CWE-918/RequestForgery.ql

‎actions/ql/integration-tests/query-suite/test.py‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
import runs_on
2+
import pytest
3+
from query_suites import *
4+
5+
well_known_query_suites = ['actions-code-quality.qls', 'actions-security-and-quality.qls', 'actions-security-extended.qls', 'actions-code-scanning.qls']
6+
7+
@runs_on.posix
8+
@pytest.mark.parametrize("query_suite", well_known_query_suites)
9+
def test(codeql, actions, check_query_suite, query_suite):
10+
check_query_suite(query_suite)
11+
12+
@runs_on.posix
13+
def test_not_included_queries(codeql, actions, check_queries_not_included):
14+
check_queries_not_included('actions', well_known_query_suites)

‎actions/ql/lib/CHANGELOG.md‎

Lines changed: 4 additions & 0 deletions

‎actions/ql/lib/change-notes/released/0.4.8.md‎

Lines changed: 3 additions & 0 deletions

‎actions/ql/lib/codeql-pack.release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
11
---
2-
lastReleaseVersion: 0.4.7
2+
lastReleaseVersion: 0.4.8

‎actions/ql/lib/qlpack.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
name: codeql/actions-all
2-
version: 0.4.8-dev
2+
version: 0.4.9-dev
33
library: true
44
warnOnImplicitThis: true
55
dependencies:

0 commit comments

Comments
 (0)