-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ruby: enable diff-informed data flow queries #18337
Conversation
❤️ |
6fdd765
to
583c703
Compare
583c703
to
772c336
Compare
This reverts commit 772c336.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Copilot reviewed 32 out of 52 changed files in this pull request and generated no comments.
Files not reviewed (20)
- ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/experimental/ZipSlipQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/Excon.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/Faraday.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/HttpClient.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/Httparty.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/NetHttp.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/OpenURI.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/RestClient.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/http_clients/Typhoeus.qll: Language not supported
- ruby/ql/lib/codeql/ruby/frameworks/stdlib/Pathname.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/CleartextLoggingQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/CleartextStorageQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/CodeInjectionQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/CommandInjectionQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/ConditionalBypassQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/HardcodedDataInterpretedAsCodeQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/HttpToFileAccessQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/ImproperLdapAuthQuery.qll: Language not supported
- ruby/ql/lib/codeql/ruby/security/InsecureDownloadQuery.qll: Language not supported
Tip: Copilot code review supports C#, Go, Java, JavaScript, Markdown, Python, Ruby and TypeScript, with more languages coming soon. Learn more
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice!
The first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases.
Those TODOs are then fixed up in the second commit.
Evaluation shows up to 63% speedup, with a median of 18% speedup.