Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Sep 12, 2025

• Add initial support for Ruby Grape

  felickz

  committed
  d295acc

  Copy full SHA for d295acc

Commits on Apr 12, 2024

• Ruby: Deprecate models-as-data CSV interface

  hvitved

  committed
  04de315

  Copy full SHA for 04de315

Commits on Mar 1, 2024

• Implement models for translation methods

  joefarebrother

  committed
  ef0a1d2

  Copy full SHA for ef0a1d2

Commits on Jan 30, 2024

• Ruby: Add basic modeling for ViewComponent

  

  hmac

  authored and

  hvitved

  committed
  557b49c

  Copy full SHA for 557b49c

Commits on Oct 16, 2023

• ruby: qlformat

  alexrford

  committed
  66d230a

  Copy full SHA for 66d230a

Commits on Aug 25, 2023

• Add JWT Security Queries

  maikypedia

  committed
  17565cd

  Copy full SHA for 17565cd

Commits on Jul 31, 2023

• qlformat

  alexrford

  committed
  7f82aba

  Copy full SHA for 7f82aba

Commits on Jul 14, 2023

• Merge branch 'main' into maikypedia/ldap-injection

  alexrford

  authored
  a524735

  Copy full SHA for a524735

Commits on Jul 12, 2023

• Update Frameworks.qll

  maikypedia

  authored
  1559b7d

  Copy full SHA for 1559b7d

Commits on Jun 6, 2023

• Merge branch 'main' into amammad-ruby-YAMLunsafeLoad

  aibaars

  authored
  7324d17

  Copy full SHA for 7324d17

Commits on Jun 1, 2023

• Merge branch 'main' into maikypedia/sqli-sink

  alexrford

  authored
  d09f6d3

  Copy full SHA for d09f6d3

Commits on May 31, 2023

• Update Frameworks.qll

  maikypedia

  authored
  13ce6a6

  Copy full SHA for 13ce6a6

Commits on May 27, 2023

• v3 add global taint steps for to_ruby of YAML/Psych

  

  am0o0

  authored and

  hmac

  committed
  e76ed94

  Copy full SHA for e76ed94

Commits on May 25, 2023

• Add LDAP Injection query (incomplete)

  maikypedia

  committed
  026d94c

  Copy full SHA for 026d94c

Commits on May 23, 2023

• Pg Library, change note and Frameworks.qll

  maikypedia

  committed
  ad5355a

  Copy full SHA for ad5355a

Commits on May 15, 2023

• Add SqlSanitization to `Concepts` and turn private

  maikypedia

  committed
  3c00235

  Copy full SHA for 3c00235

Commits on May 7, 2023

• CWE-089 Add Sequel SQL Injection Sink

  maikypedia

  committed
  3960853

  Copy full SHA for 3960853

Commits on Apr 24, 2023

• Ruby: add sqlite3 to Frameworks.qll

  alexrford

  committed
  edf48f4

  Copy full SHA for edf48f4

Commits on Mar 17, 2023

• Merge branch 'main' into maikypedia/ruby-ssti

  alexrford

  authored
  60f3138

  Copy full SHA for 60f3138

Commits on Mar 16, 2023

• Solve merge conflict and add a change note

  maikypedia

  committed
  a229f7a

  Copy full SHA for a229f7a

Commits on Mar 13, 2023

• Ruby: Import Sinatra modeling by default

  hmac

  committed
  c82b463

  Copy full SHA for c82b463

Commits on Feb 25, 2023

• Add initial query for Ruby SSTI

  maikypedia

  committed
  ff50513

  Copy full SHA for ff50513

Commits on Feb 3, 2023

• Support for Twirp framework

  

  Alvaro Muñoz

  committed
  dd31be4

  Copy full SHA for dd31be4

Commits on Jan 11, 2023

• Ruby: Recognise rack applications

  Show description for 0626d69
  hmac

  committed
  0626d69

  Copy full SHA for 0626d69

Commits on Dec 11, 2022

• Merge pull request #11337 from hmac/actionmailbox

  Show description for 6c8896d
  hmac

  authored
  6c8896d

  Copy full SHA for 6c8896d

Commits on Nov 30, 2022

• Ruby: Model various JSON methods

  hmac

  committed
  5259d4a

  Copy full SHA for 5259d4a

Commits on Nov 29, 2022

• Ruby: Model remote input for ActionMailbox

  hmac

  committed
  eac5aa2

  Copy full SHA for eac5aa2

Commits on Oct 17, 2022

• move model of printf style calls to StringFormatters.qll

  erik-krogh

  committed
  a2b924b

  Copy full SHA for a2b924b

Commits on Oct 12, 2022

• Merge branch 'main' into ruby/activejob-deserialize

  alexrford

  authored
  0536d4b

  Copy full SHA for 0536d4b

Commits on Oct 10, 2022

• Ruby: add ActionMailer#params as a RemoteFlowSource

  nickrolfe

  committed
  d61f055

  Copy full SHA for d61f055

Commits on Oct 9, 2022

• Ruby: Add ActiveJob::Serializers.deserialize as a code execution sink

  alexrford

  committed
  ee77404

  Copy full SHA for ee77404

Commits on Aug 29, 2022

• Ruby: Import ActiveResource by default

  hmac

  committed
  75e1497

  Copy full SHA for 75e1497

Commits on Jul 18, 2022

• Ruby: Model Arel.sql

  hmac

  committed
  7b8603c

  Copy full SHA for 7b8603c

Commits on Jun 20, 2022

• Ruby: Model methods in Rails::Generators::Actions

  Show description for e1dcc20
  hmac

  committed
  e1dcc20

  Copy full SHA for e1dcc20

• Ruby: Recognise ActionCable logger class

  hmac

  committed
  0ce14fc

  Copy full SHA for 0ce14fc