Commits

Breadcrumbs

History for

ond1e769b

User selector

All users

All time

Commit History

Commits on Apr 21, 2023

• Use double curly braces

  JarLob

  committed
  6e9f54e

  Copy full SHA for 6e9f54e

Commits on Apr 14, 2023

• Move `actions/github-script` out of Actions.qll

  JarLob

  committed
  e9dee3a

  Copy full SHA for e9dee3a

• Extract `where` parts into predicates

  JarLob

  committed
  3724ea1

  Copy full SHA for 3724ea1

• Encapsulate github-script

  JarLob

  committed
  ac1c206

  Copy full SHA for ac1c206

• Encapsulate composite actions

  JarLob

  committed
  d80c541

  Copy full SHA for d80c541

Commits on Apr 13, 2023

• Make predicate name clearer

  JarLob

  committed
  9406576

  Copy full SHA for 9406576

• Use `YamlMapping` for modeling `Env`

  JarLob

  committed
  79218a3

  Copy full SHA for 79218a3

• Rename Env

  JarLob

  committed
  dd52ef8

  Copy full SHA for dd52ef8

Commits on Apr 6, 2023

• Fix warnings

  JarLob

  committed
  7573c61

  Copy full SHA for 7573c61

• Add support for composite actions

  JarLob

  committed
  9c7eecf

  Copy full SHA for 9c7eecf

Commits on Apr 5, 2023

• Change UI message

  JarLob

  committed
  eef1973

  Copy full SHA for eef1973

• Add simple taint tracking for env variables

  JarLob

  committed
  5c5b9f9

  Copy full SHA for 5c5b9f9

Commits on Apr 3, 2023

• Look for script injections in actions/github-script

  JarLob

  committed
  8ea4182

  Copy full SHA for 8ea4182

• fix formatting

  JarLob

  committed
  ba5747d

  Copy full SHA for ba5747d

• Add more sources, more unit tests, fixes to the GitHub Actions injection query

  JarLob

  committed
  99d634c

  Copy full SHA for 99d634c

Commits on May 17, 2022

• change @id from js/actions/injection to js/actions/command-injection

  erik-krogh

  committed
  2550988

  Copy full SHA for 2550988

Commits on May 5, 2022

• rename getAReferencedExpression to getASimpleReferenceExpression and add examples of what it can parse

  erik-krogh

  committed
  c0152a4

  Copy full SHA for c0152a4

Commits on May 4, 2022

• make the big disjunctions more readable by using a set literal

  erik-krogh

  committed
  8e2b00d

  Copy full SHA for 8e2b00d

• add missing security severity

  erik-krogh

  committed
  31a4de9

  Copy full SHA for 31a4de9

• set js/actions/injection as a high precision warning query

  erik-krogh

  committed
  48fb01f

  Copy full SHA for 48fb01f

• move js/actions/injection out of experimental

  erik-krogh

  committed
  2a65d1d

  Copy full SHA for 2a65d1d

Loading