1 python cryptography module upgrades #2
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
All remaining functionality in `StandardEndpointFilters` is only being used in `EndpointCharacteristics`, so it can be moved there as a small set of helper predicates.
That way the specific configs which inherit from `AtmConfig` also inherit from `TaintTracking::Configuration`. This removes the need for two separate config classes for each query.
A long as we're not boosting sources, `isSource` is identical to `isKnownSource`.
Holds if `sink` is a known taint sink or an "effective" sink.
Define the query for finding ATM alerts in the base class `AtmConfig`, and call it from each query's .ql file.
Ruby: Add case string comparison barrier guard
Name the query configuration e.g. `NosqlInjectionATMConfig` rather than `Configuration`.
This import isn't needed.
ATM: Simplify query configurations
Swift: tentative fix for the bazel cache
Update CSV framework coverage reports
… adding 'isKnown' support to get the universe of possible options. Finally added an unknown algorithm stub, so if no match is found, we can consistently have a string representing unknown.
…te, and to have a fail safe 'unknown' option. If a block mode is unknown, the isWeak predicate will not stipulate the algorithm is weak by default. An isKnown predicate is added to determine if the algorithm is known.
… finding block modes that aren't known. This avoids cases where the library is updated and we don't recognize new modes as being weak or strong, instead they would've been ignored entirely.
…d should be caught through name normalization. Added EAX block mode.
ropwareJB
pushed a commit
that referenced
this pull request
Jul 25, 2023
…for-unused-parameters-2 Go: make `ParameterNode`s for unused parameters #2 (make a disjoint class for unused ones)
bdrodes
pushed a commit
that referenced
this pull request
Sep 6, 2024
C++: Fix zstd and clean up test
bdrodes
pushed a commit
that referenced
this pull request
Jan 9, 2025
Refactor CfgScopes and Ast predicate names
LWSimpkins
pushed a commit
that referenced
this pull request
Feb 5, 2025
Test: Remove location parsing
LWSimpkins
pushed a commit
that referenced
this pull request
Mar 28, 2025
Go: Add database source models for the github.com/couchbase/gocb package (#2)
LWSimpkins
pushed a commit
that referenced
this pull request
Mar 28, 2025
Go: Add `database` source models for the `squirrel` package (#2)
dilanbhalla
pushed a commit
that referenced
this pull request
May 15, 2025
JS: Add isMiddlewareSetup() hook to Routing model
dilanbhalla
pushed a commit
that referenced
this pull request
May 15, 2025
Implement first stage cryptography modelling and queries
dilanbhalla
pushed a commit
that referenced
this pull request
Jun 2, 2025
Java: Fix SpringRequestMappingMethod URL Extraction #2
LWSimpkins
pushed a commit
that referenced
this pull request
Jun 9, 2025
…ction-sink Go: Add BigQuery as a sink for SQLi queries #2
ropwareJB
pushed a commit
that referenced
this pull request
Jul 1, 2025
Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages (#2)
dilanbhalla
pushed a commit
that referenced
this pull request
Oct 17, 2025
Signature model refactor experimental
dilanbhalla
pushed a commit
that referenced
this pull request
Nov 24, 2025
…8e3d-0895-49ec-9025-a9864c8e5367 Fix generate-code-scanning-query-list.py to handle empty code-quality-extended suites
ropwareJB
pushed a commit
that referenced
this pull request
Dec 15, 2025
ropwareJB
pushed a commit
that referenced
this pull request
Dec 15, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
19 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Updates to support API modeling for cryptography.