https://b.hatena.ne.jp/efcl/CodeQL/ CodeQLに関するefclのはてなブックマーク (5) https://github.com/github/codeql-coding-standards GitHubのCodeQLクエリ efcl 2022-07-15T12:59:46Z Github CodeQL 2 <blockquote cite="https://github.com/github/codeql-coding-standards" title="GitHub - github/codeql-coding-standards: This repository contains CodeQL queries and libraries which support various Coding Standards."><cite><img src="https://cdn-ak2.favicon.st-hatena.com/64?url=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-coding-standards" alt="" /> <a href="https://github.com/github/codeql-coding-standards">GitHub - github/codeql-coding-standards: This repository contains CodeQL queries and libraries which support various Coding Standards.</a></cite><p><a href="https://github.com/github/codeql-coding-standards"><img src="https://cdn-ak-scissors.b.st-hatena.com/image/square/77e9d6aca5475c67e073e4ce83f266c6e7b322b5/backend=imagemagick;height=90;version=1;width=120/https%3A%2F%2Fopengraph.githubassets.com%2Ffbb26984f40ae25a6a7b573b8a98adc7766c5da2a6a929c8343008059de94a5d%2Fgithub%2Fcodeql-coding-standards" alt="GitHub - github/codeql-coding-standards: This repository contains CodeQL queries and libraries which support various Coding Standards." title="GitHub - github/codeql-coding-standards: This repository contains CodeQL queries and libraries which support various Coding Standards." class="entry-image" /></a></p><p>You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert</p><p><a href="https://b.hatena.ne.jp/entry/s/github.com/github/codeql-coding-standards"><img src="https://b.hatena.ne.jp/entry/image/https://github.com/github/codeql-coding-standards" alt="はてなブックマーク - GitHub - github/codeql-coding-standards: This repository contains CodeQL queries and libraries which support various Coding Standards." title="はてなブックマーク - GitHub - github/codeql-coding-standards: This repository contains CodeQL queries and libraries which support various Coding Standards." border="0" style="border: none" /></a> <a href="https://b.hatena.ne.jp/entry/s/github.com/github/codeql-coding-standards"><img src="https://b.st-hatena.com/images/append.gif" border="0" alt="はてなブックマークに追加" title="はてなブックマークに追加" /></a></p></blockquote> https://github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/ CodeQLのパッケージマネージャー efcl 2021-07-29T01:02:57Z CodeQL 3 <blockquote cite="https://github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/" title="Introducing the CodeQL package manager (public beta) - GitHub Changelog"><cite><img src="https://cdn-ak2.favicon.st-hatena.com/64?url=https%3A%2F%2Fgithub.blog%2Fchangelog%2F2021-07-27-introducing-the-codeql-package-manager-public-beta%2F" alt="" /> <a href="https://github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/">Introducing the CodeQL package manager (public beta) - GitHub Changelog</a></cite><p><a href="https://github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/"><img src="https://cdn-ak-scissors.b.st-hatena.com/image/square/33c91c8cd0fd63ca92f81850265fac42e7237dc1/backend=imagemagick;height=90;version=1;width=120/https%3A%2F%2Fgithub.blog%2Fwp-content%2Fthemes%2Fgithub-2021-child%2Fdist%2Fimg%2Fsocial-v3-new-releases.jpg" alt="Introducing the CodeQL package manager (public beta) - GitHub Changelog" title="Introducing the CodeQL package manager (public beta) - GitHub Changelog" class="entry-image" /></a></p><p>Menu. Currently selected: Integrating CodeQL packs into GitHub code scanning workflows The CodeQL package manager is now available in public beta on GitHub.com. CodeQL packages can contain CodeQL queries and CodeQL libraries — and of course you can express dependencies between packs. You can uplo...</p><p><a href="https://b.hatena.ne.jp/entry/s/github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/"><img src="https://b.hatena.ne.jp/entry/image/https://github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/" alt="はてなブックマーク - Introducing the CodeQL package manager (public beta) - GitHub Changelog" title="はてなブックマーク - Introducing the CodeQL package manager (public beta) - GitHub Changelog" border="0" style="border: none" /></a> <a href="https://b.hatena.ne.jp/entry/s/github.blog/changelog/2021-07-27-introducing-the-codeql-package-manager-public-beta/"><img src="https://b.st-hatena.com/images/append.gif" border="0" alt="はてなブックマークに追加" title="はてなブックマークに追加" /></a></p></blockquote> https://securitylab.github.com/ctf/jquery/ GitHub CodeQLでjQuery pluginのXSSをマナブチュートリアル efcl 2020-09-19T12:42:14Z CodeQL security 2 <blockquote cite="https://securitylab.github.com/ctf/jquery/" title="XSS-unsafe jQuery plugins"><cite><img src="https://cdn-ak2.favicon.st-hatena.com/64?url=https%3A%2F%2Fsecuritylab.github.com%2Fctf%2Fjquery%2F" alt="" /> <a href="https://securitylab.github.com/ctf/jquery/">XSS-unsafe jQuery plugins</a></cite><p><a href="https://securitylab.github.com/ctf/jquery/"><img src="https://cdn-ak-scissors.b.st-hatena.com/image/square/e9d8329d7951cd8aa78b430975698acb9e37bdb4/backend=imagemagick;height=90;version=1;width=120/https%3A%2F%2Fsecuritylab.github.com%2Fassets%2Fimg%2Fmarketing%2Fctf.png" alt="XSS-unsafe jQuery plugins" title="XSS-unsafe jQuery plugins" class="entry-image" /></a></p><p>This CTF is now closed! You can still challenge yourself for fun! Check the reference answers Do you want to challenge your vulnerability hunting skills and to quickly learn Semmle CodeQL? Your mission, should you choose to accept it, is to find variants of jQuery plugins that expose their client...</p><p><a href="https://b.hatena.ne.jp/entry/s/securitylab.github.com/ctf/jquery/"><img src="https://b.hatena.ne.jp/entry/image/https://securitylab.github.com/ctf/jquery/" alt="はてなブックマーク - XSS-unsafe jQuery plugins" title="はてなブックマーク - XSS-unsafe jQuery plugins" border="0" style="border: none" /></a> <a href="https://b.hatena.ne.jp/entry/s/securitylab.github.com/ctf/jquery/"><img src="https://b.st-hatena.com/images/append.gif" border="0" alt="はてなブックマークに追加" title="はてなブックマークに追加" /></a></p></blockquote> https://securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/ Command Injectionを調査するCodeQLのスクリプトを書いて見つけたCVEの一覧 efcl 2020-06-27T09:24:02Z node.js CodeQL security 1 <blockquote cite="https://securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/" title="GHSL-2020-122: Command injection in git-diff-apply"><cite><img src="https://cdn-ak2.favicon.st-hatena.com/64?url=https%3A%2F%2Fsecuritylab.github.com%2Fadvisories%2FGHSL-2020-122-rce-git-diff-apply%2F" alt="" /> <a href="https://securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/">GHSL-2020-122: Command injection in git-diff-apply</a></cite><p><a href="https://securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/"><img src="" alt="GHSL-2020-122: Command injection in git-diff-apply" title="GHSL-2020-122: Command injection in git-diff-apply" class="entry-image" /></a></p><p></p><p><a href="https://b.hatena.ne.jp/entry/s/securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/"><img src="https://b.hatena.ne.jp/entry/image/https://securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/" alt="はてなブックマーク - GHSL-2020-122: Command injection in git-diff-apply" title="はてなブックマーク - GHSL-2020-122: Command injection in git-diff-apply" border="0" style="border: none" /></a> <a href="https://b.hatena.ne.jp/entry/s/securitylab.github.com/advisories/GHSL-2020-122-rce-git-diff-apply/"><img src="https://b.st-hatena.com/images/append.gif" border="0" alt="はてなブックマークに追加" title="はてなブックマークに追加" /></a></p></blockquote> https://github.blog/news-insights/company-news/github-welcomes-semmle/ CodeQLの検索 efcl 2019-12-07T01:17:34Z security SQL 21 <blockquote cite="https://github.blog/news-insights/company-news/github-welcomes-semmle/" title="Semmle | Semmle Discovers Six Critical Vulnerabilities Affecting Macs, iPhones, and iPads"><cite><img src="https://cdn-ak2.favicon.st-hatena.com/64?url=https%3A%2F%2Fgithub.blog%2Fnews-insights%2Fcompany-news%2Fgithub-welcomes-semmle%2F" alt="" /> <a href="https://github.blog/news-insights/company-news/github-welcomes-semmle/">Semmle | Semmle Discovers Six Critical Vulnerabilities Affecting Macs, iPhones, and iPads</a></cite><p><a href="https://github.blog/news-insights/company-news/github-welcomes-semmle/"><img src="https://cdn-ak-scissors.b.st-hatena.com/image/square/a361a75ab1746ffa12e421c8fe617ab8419dca60/backend=imagemagick;height=90;version=1;width=120/https%3A%2F%2Fgithub.blog%2Fwp-content%2Fuploads%2F2019%2F09%2Fgithub-and-semmle-1.png" alt="Semmle | Semmle Discovers Six Critical Vulnerabilities Affecting Macs, iPhones, and iPads" title="Semmle | Semmle Discovers Six Critical Vulnerabilities Affecting Macs, iPhones, and iPads" class="entry-image" /></a></p><p>AI &amp; MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine...</p><p><a href="https://b.hatena.ne.jp/entry/s/github.blog/news-insights/company-news/github-welcomes-semmle/"><img src="https://b.hatena.ne.jp/entry/image/https://github.blog/news-insights/company-news/github-welcomes-semmle/" alt="はてなブックマーク - Semmle | Semmle Discovers Six Critical Vulnerabilities Affecting Macs, iPhones, and iPads" title="はてなブックマーク - Semmle | Semmle Discovers Six Critical Vulnerabilities Affecting Macs, iPhones, and iPads" border="0" style="border: none" /></a> <a href="https://b.hatena.ne.jp/entry/s/github.blog/news-insights/company-news/github-welcomes-semmle/"><img src="https://b.st-hatena.com/images/append.gif" border="0" alt="はてなブックマークに追加" title="はてなブックマークに追加" /></a></p></blockquote>