Commits

Commit history

1. Commits on May 19, 2025

   • Lower the precision of a range of harcoded password queries to remove them from query suites.

     michaelnebel

     committed
     03ecd24View commit details

     Copy full SHA for 03ecd24

     View code at this pointBrowse repository at this point
2. Commits on Jan 31, 2025

   • Added missing "GOOD" and "BAD" to some examples

     fabienpe

     committed
     a9f107cView commit details

     Copy full SHA for a9f107c

     View code at this pointBrowse repository at this point
3. Commits on Oct 24, 2023

   • Add aliases for public, importable renamed classes and predicates.

     Show description for 59a49ee
     smowton

     authored
     59a49eeView commit details

     Copy full SHA for 59a49ee

     View code at this pointBrowse repository at this point
4. Commits on Apr 14, 2023

   • Refactor HardcodedCredentialsSourceCall

     egregius313

     committed
     735a738View commit details

     Copy full SHA for 735a738

     View code at this pointBrowse repository at this point
5. Commits on Mar 30, 2023

   • Refactor HardcodedCredentialsApiCall.qll

     egregius313

     committed
     2698b61View commit details

     Copy full SHA for 2698b61

     View code at this pointBrowse repository at this point
6. Commits on Aug 13, 2022

   • Convert tests to inline expectations and fix one bug revealed doing so

     Show description for b62e9dc
     smowton

     committed
     b62e9dcView commit details

     Copy full SHA for b62e9dc

     View code at this pointBrowse repository at this point

   • Split up hardcoded creds queries, ready for conversion to inline expectations

     smowton

     committed
     ddb0846View commit details

     Copy full SHA for ddb0846

     View code at this pointBrowse repository at this point

   • Additional hardcoded credentials candidates 3rd-party api calls

     

     bananabr

     authored and

     smowton

     committed
     60e0f09View commit details

     Copy full SHA for 60e0f09

     View code at this pointBrowse repository at this point
7. Commits on Oct 29, 2021

   • Java: Deprecate `StringLiteral.getRepresentedString()`

     Marcono1234

     committed
     bfb9577View commit details

     Copy full SHA for bfb9577

     View code at this pointBrowse repository at this point
8. Commits on Oct 26, 2021

   • use set literal instead of big disjunction of literals

     erik-krogh

     committed
     a3c55c2View commit details

     Copy full SHA for a3c55c2

     View code at this pointBrowse repository at this point
9. Commits on Sep 30, 2021

   • Update change note; drop unnecessary import

     smowton

     committed
     cb4ce36View commit details

     Copy full SHA for cb4ce36

     View code at this pointBrowse repository at this point

   • Specifically include Base64 encode/decode as a likely intermediate step for hardcoded credentials

     smowton

     committed
     b0983cbView commit details

     Copy full SHA for b0983cb

     View code at this pointBrowse repository at this point

   • autoformat

     

     x-f1v3

     authored and

     smowton

     committed
     24c9bb2View commit details

     Copy full SHA for 24c9bb2

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     

     x-f1v3

     authored and

     smowton

     committed
     168fc41View commit details

     Copy full SHA for 168fc41

     View code at this pointBrowse repository at this point

   • detects a hard-coded cipher key for shiro

     

     x-f1v3

     authored and

     smowton

     committed
     f3bde56View commit details

     Copy full SHA for f3bde56

     View code at this pointBrowse repository at this point

   • Merge pull request #5852 from luchua-bc/java/hardcoded-azure-credential

     Show description for 60a023d
     smowton

     authored
     60a023dView commit details

     Copy full SHA for 60a023d

     View code at this pointBrowse repository at this point
10. Commits on Jun 15, 2021

    • Update security-severity scores

      calumgrant

      committed
      771e686View commit details

      Copy full SHA for 771e686

      View code at this pointBrowse repository at this point
11. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
12. Commits on May 14, 2021

    • Move APIs from predicates flagged auto-generated to the other section

      luchua-bc

      committed
      1a072f3View commit details

      Copy full SHA for 1a072f3

      View code at this pointBrowse repository at this point

    • Remove the sample Java file in the src folder

      luchua-bc

      committed
      9ef58e3View commit details

      Copy full SHA for 9ef58e3

      View code at this pointBrowse repository at this point
13. Commits on May 12, 2021

    • Add a change note and reset the qhelp file

      luchua-bc

      committed
      4d01471View commit details

      Copy full SHA for 4d01471

      View code at this pointBrowse repository at this point
14. Commits on May 7, 2021

    • Query to detect hard-coded Azure credentials

      luchua-bc

      committed
      fc7d340View commit details

      Copy full SHA for fc7d340

      View code at this pointBrowse repository at this point
15. Commits on Apr 10, 2021

    • Java: Add ToStringMethod

      Marcono1234

      committed
      9349e69View commit details

      Copy full SHA for 9349e69

      View code at this pointBrowse repository at this point
16. Commits on Jul 13, 2020

    • Merge Hardcoded AWS Credentials check into the mail source folder

      luchua-bc

      committed
      12803f1View commit details

      Copy full SHA for 12803f1

      View code at this pointBrowse repository at this point
17. Commits on Jun 17, 2020

    • Hardcoded AWS credentials

      luchua-bc

      committed
      f40e27aView commit details

      Copy full SHA for f40e27a

      View code at this pointBrowse repository at this point
18. Commits on Jan 29, 2020

    • Java: Autoformat.

      aschackmull

      committed
      9b7a728View commit details

      Copy full SHA for 9b7a728

      View code at this pointBrowse repository at this point
19. Commits on Aug 2, 2019

    • Java: Improve the precision of java/hardcoded-credential-api-call.

      aschackmull

      committed
      b1b1edeView commit details

      Copy full SHA for b1b1ede

      View code at this pointBrowse repository at this point
20. Commits on Feb 12, 2019

    • Java: Autoformat qls.

      aschackmull

      committed
      2546963View commit details

      Copy full SHA for 2546963

      View code at this pointBrowse repository at this point
21. Commits on Nov 16, 2018

    • Java: Convert security queries to path-problems.

      aschackmull

      committed
      5e03b6fView commit details

      Copy full SHA for 5e03b6f

      View code at this pointBrowse repository at this point
22. Commits on Oct 12, 2018

    • Merge pull request #312 from aschackmull/java/autoformat-libs

      Show description for a8be7f2
      semmle-qlci

      authored
      a8be7f2View commit details

      Copy full SHA for a8be7f2

      View code at this pointBrowse repository at this point

    • Java: Autoformat libs outside semmle.code.java.

      aschackmull

      committed
      67d1c72View commit details

      Copy full SHA for 67d1c72

      View code at this pointBrowse repository at this point
23. Commits on Oct 11, 2018

    • Java: Autoformat most queries.

      aschackmull

      committed
      dd5a8f0View commit details

      Copy full SHA for dd5a8f0

      View code at this pointBrowse repository at this point
24. Commits on Aug 30, 2018

    • Migrate Java code to separate QL repo.

      pavgust

      committed
      846c9d5View commit details

      Copy full SHA for 846c9d5

      View code at this pointBrowse repository at this point
25. Loading