Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ruby: enable diff-informed data flow queries #18337

Merged
merged 4 commits into from
Jan 20, 2025

Conversation

asgerf
Copy link
Contributor

@asgerf asgerf commented Dec 20, 2024

The first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases.

Those TODOs are then fixed up in the second commit.

Evaluation shows up to 63% speedup, with a median of 18% speedup.

@asgerf asgerf added the no-change-note-required This PR does not need a change note label Dec 20, 2024
@github-actions github-actions bot added the Ruby label Dec 20, 2024
@erik-krogh
Copy link
Contributor

❤️

@asgerf asgerf marked this pull request as ready for review January 20, 2025 10:22
@Copilot Copilot bot review requested due to automatic review settings January 20, 2025 10:22
@asgerf asgerf requested a review from a team as a code owner January 20, 2025 10:22

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 32 out of 52 changed files in this pull request and generated no comments.

Files not reviewed (20)
  • ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/experimental/ZipSlipQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/Excon.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/Faraday.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/HttpClient.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/Httparty.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/NetHttp.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/OpenURI.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/RestClient.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/http_clients/Typhoeus.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/frameworks/stdlib/Pathname.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/CleartextLoggingQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/CleartextStorageQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/CodeInjectionQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/CommandInjectionQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/ConditionalBypassQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/HardcodedDataInterpretedAsCodeQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/HttpToFileAccessQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/ImproperLdapAuthQuery.qll: Language not supported
  • ruby/ql/lib/codeql/ruby/security/InsecureDownloadQuery.qll: Language not supported

Tip: Copilot code review supports C#, Go, Java, JavaScript, Markdown, Python, Ruby and TypeScript, with more languages coming soon. Learn more

Copy link
Contributor

@hvitved hvitved left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

@asgerf asgerf merged commit 0097e49 into github:main Jan 20, 2025
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
no-change-note-required This PR does not need a change note Ruby
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants