Repository navigation

Java: Promote Insecure Spring Boot Actuator Configuration query from experimental - #20006

Merged

jcogs33 merged 23 commits into

github:mainfrom

jcogs33:jcogs33/java/insecure-spring-actuator-config-promotion

Aug 26, 2025

Commits on Jul 17, 2025
- Java: copy out of experimental
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  a39cb40
- Java: remove experimental files
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  0dbddbd
- Java: remove deprecation
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  38260e7
- Java: update tests for non-experimental directory
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  fc930d9
- Java: convert tests to inline expectations
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  ed8da5e
- Java: fix integration tests
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  b479f5c
- Java: move code to .qll file
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  1b90a30
- Java: split tests by versions
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  3823186
- Java: fix test case for version 1.4
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  2bfc4b4
- Java: add overlay annotations
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  ae163a9
- Java: add related location to alert message
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  0d2a422
Commits on Jul 18, 2025
- Java: update qhelp
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  afa6610
- Java: support version 3.x
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  ea35fbb
- Java: minor refactoring
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  7d5e939
- Java: adjust metadata and alert msg
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  ea529b0
- Java: rename to align with 'java/spring-boot-exposed-actuators' query
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  70d5150
- Java: add change note
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  8decc13
- Java: support 'management.endpoints.web.expose' property
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  685f68d
- Java: consider all endpoints except for health and info as sensitive to align with Spring docs
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  7250265
Commits on Jul 19, 2025
- Java: remove version debugging from alert message
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  0dd33b2
- Java: fix test failures cause by alert msg change
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  c9692a6
Commits on Aug 22, 2025
- Java: add summary to change note
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  f0542dd
Commits on Aug 26, 2025
- Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion
  jcogs33
  authored
  3675e4b

Java: Promote Insecure Spring Boot Actuator Configuration query from experimental by jcogs33 · Pull Request #20006 · github/codeql · GitHub

Repository navigation

Java: Promote Insecure Spring Boot Actuator Configuration query from experimental - #20006

Java: Promote Insecure Spring Boot Actuator Configuration query from experimental#20006
jcogs33 merged 23 commits into
github:mainfrom
jcogs33:jcogs33/java/insecure-spring-actuator-config-promotion

Commits on Jul 17, 2025

Java: copy out of experimental

Java: remove experimental files

Java: remove deprecation

Java: update tests for non-experimental directory

Java: convert tests to inline expectations

Java: fix integration tests

Java: move code to .qll file

Java: split tests by versions

Java: fix test case for version 1.4

Java: add overlay annotations

Java: add related location to alert message

Commits on Jul 18, 2025

Java: update qhelp

Java: support version 3.x

Java: minor refactoring

Java: adjust metadata and alert msg

Java: rename to align with 'java/spring-boot-exposed-actuators' query

Java: add change note

Java: support 'management.endpoints.web.expose' property

Java: consider all endpoints except for health and info as sensitive to align with Spring docs

Commits on Jul 19, 2025

Java: remove version debugging from alert message

Java: fix test failures cause by alert msg change

Commits on Aug 22, 2025

Java: add summary to change note

Commits on Aug 26, 2025

Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion