Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Sep 19, 2025

• JS: Model `GraphQLObjectType` resolve params as sources

  Napalys

  committed
  6cfc950

  Copy full SHA for 6cfc950

Commits on Sep 17, 2025

• Merge pull request #20450 from Napalys/js/graph-ql-ench

  Show description for 4f8166a
  Napalys

  authored
  4f8166a

  Copy full SHA for 4f8166a

• JS: Add `variableValues` to the previous summaryModel to enchance the flow.

  Napalys

  committed
  7affcf4

  Copy full SHA for 7affcf4

• JS: Add summary model for `graphql`'s `rootValue`

  Napalys

  committed
  4282005

  Copy full SHA for 4282005

• Renamed `AWS-V3-Common` to `@aws-sdk/client.Client`

  Napalys

  committed
  4df8db0

  Copy full SHA for 4df8db0

• Fixed model type names

  Show description for 10f3a83
  

  Napalys

  and

  asgerf

  committed
  10f3a83

  Copy full SHA for 10f3a83

• Added modeling for `CreatePreparedStatementCommand`

  Napalys

  committed
  9ca4773

  Copy full SHA for 9ca4773

• Moved typeModel at the start of the file

  Napalys

  committed
  801a34f

  Copy full SHA for 801a34f

• Unified aws-db modeling into singular file

  Napalys

  committed
  9beac51

  Copy full SHA for 9beac51

• Added tests and modeling of database-access-result

  Napalys

  committed
  5b31350

  Copy full SHA for 5b31350

• Added modeling of rds v2 and v3 for sql injections

  Napalys

  committed
  e5f0285

  Copy full SHA for e5f0285

• Added modeling of athena v2 and v3 for sql injections

  Napalys

  committed
  0e6bac7

  Copy full SHA for 0e6bac7

• Added modeling of client-s3 v2 and v3

  Napalys

  committed
  ee1af43

  Copy full SHA for ee1af43

• Added modeling for V2 of dynamoDB

  Napalys

  committed
  06ab918

  Copy full SHA for 06ab918

• Added modeling of dynamodb v3 for sql injections

  Napalys

  committed
  ae2e8b1

  Copy full SHA for ae2e8b1

Commits on Sep 15, 2025

• JS: Add modeling for `call-me-maybe`

  Napalys

  committed
  3a75500

  Copy full SHA for 3a75500

Commits on Sep 5, 2025

• Rename `cors-misconfiguration` to `cors-origin`.

  Napalys

  committed
  d8c4d6d

  Copy full SHA for d8c4d6d

Commits on Sep 4, 2025

• Replace complex wrapper classes with MaD

  Napalys

  committed
  4dac80a

  Copy full SHA for 4dac80a

Commits on Jul 31, 2025

• Moved apollo modeling to MaD

  Napalys

  committed
  fd4233e

  Copy full SHA for fd4233e

Commits on Jun 23, 2025

• JS: Add model for react 'use'

  asgerf

  committed
  980d0f4

  Copy full SHA for 980d0f4

Commits on May 1, 2025

• Added model for shelljs.env

  Napalys

  committed
  40d176a

  Copy full SHA for 40d176a

Commits on Apr 28, 2025

• Updated modeling of `aws-sdk` with `MaD`

  Napalys

  committed
  73309fb

  Copy full SHA for 73309fb

Commits on Apr 9, 2025

• Added `make-dir` model as data

  Napalys

  committed
  ce2fc25

  Copy full SHA for ce2fc25

• Merge pull request #19210 from Napalys/js/mkdirp

  Show description for f02783a
  Napalys

  authored
  f02783a

  Copy full SHA for f02783a

Commits on Apr 8, 2025

• Added `open` package model as data.

  Napalys

  committed
  b8802a2

  Copy full SHA for b8802a2

Commits on Apr 3, 2025

• Removed old `mkdirp` modeling and replaced it with `MaD`.

  Napalys

  committed
  04a39eb

  Copy full SHA for 04a39eb

• Add sink model for `mkdirp` and update tests for path injection alerts.

  Napalys

  committed
  3fa24d6

  Copy full SHA for 3fa24d6

Commits on Apr 2, 2025

• Add `rimraf` model and update tests for path injection vulnerabilities

  Napalys

  committed
  b16b407

  Copy full SHA for b16b407

Commits on Mar 28, 2025

• Added sources from `hana` db as `MaD`.

  Napalys

  committed
  d0e2aa8

  Copy full SHA for d0e2aa8

• Refactored hana's DB client to use `GuardedRouteHandler`, improving precision.

  Napalys

  committed
  f3af23e

  Copy full SHA for f3af23e

• Merge branch 'main' into js/hana_db_client

  Napalys

  authored
  f7264d8

  Copy full SHA for f7264d8

Commits on Mar 25, 2025

• Added SQL injection detection for `exec` method embeded Express client from `hdbext`.

  Napalys

  committed
  4cdc40d

  Copy full SHA for 4cdc40d

• Added `createProcStatement` as potential sql sink.

  Napalys

  committed
  7cc0634

  Copy full SHA for 7cc0634

• Added `@sap/hdbext.loadProccedure` as sql sink.

  Napalys

  committed
  0285cb6

  Copy full SHA for 0285cb6

• Modeled `execute` as potential `hana`'s sink.

  Napalys

  committed
  e595def

  Copy full SHA for e595def

Pagination

Previous

Next