Skip to content

Commit 3448da9

Browse files
IcebladeLabsIcebladeLabs
authored
Expand CI Pipeline (#59)
Add cached LLM files for new CVEs, update CI CodeQL version to 2.15.2, update to_build.json to expand CI to three new CVEs.
1 parent 0aeec97 commit 3448da9

18 files changed

Lines changed: 1554 additions & 2 deletions

‎.github/cached_output/OWASP__json-sanitizer_CVE-2020-13973_1.2.0/llm_labelled_sink_apis.json‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
[]

‎.github/cached_output/OWASP__json-sanitizer_CVE-2020-13973_1.2.0/llm_labelled_source_apis.json‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
[]

‎.github/cached_output/OWASP__json-sanitizer_CVE-2020-13973_1.2.0/llm_labelled_source_func_params.json‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
[
2+
{
3+
"package": "com.google.json",
4+
"class": "EvalMinifier",
5+
"method": "minify",
6+
"signature": "String minify(String jsonish)",
7+
"tainted_input": [
8+
"jsonish"
9+
]
10+
},
11+
{
12+
"package": "com.google.json",
13+
"class": "JsonSanitizer",
14+
"method": "sanitize",
15+
"signature": "String sanitize(String jsonish)",
16+
"tainted_input": [
17+
"jsonish"
18+
]
19+
}
20+
]

‎.github/cached_output/OWASP__json-sanitizer_CVE-2020-13973_1.2.0/llm_labelled_taint_prop_apis.json‎

Lines changed: 130 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,130 @@
1+
[
2+
{
3+
"package": "java.lang",
4+
"class": "CharSequence",
5+
"method": "toString",
6+
"signature": "String toString()",
7+
"sink_args": [],
8+
"type": "taint-propagator"
9+
},
10+
{
11+
"package": "java.lang",
12+
"class": "StringBuilder",
13+
"method": "append",
14+
"signature": "StringBuilder append(String p0)",
15+
"sink_args": [],
16+
"type": "taint-propagator"
17+
},
18+
{
19+
"package": "java.lang",
20+
"class": "StringBuilder",
21+
"method": "append",
22+
"signature": "StringBuilder append(char p0)",
23+
"sink_args": [],
24+
"type": "taint-propagator"
25+
},
26+
{
27+
"package": "java.lang",
28+
"class": "StringBuilder",
29+
"method": "append",
30+
"signature": "StringBuilder append(CharSequence p0, int p1, int p2)",
31+
"sink_args": [],
32+
"type": "taint-propagator"
33+
},
34+
{
35+
"package": "java.lang",
36+
"class": "StringBuilder",
37+
"method": "insert",
38+
"signature": "StringBuilder insert(int p0, char p1)",
39+
"sink_args": [],
40+
"type": "taint-propagator"
41+
},
42+
{
43+
"package": "java.lang",
44+
"class": "StringBuilder",
45+
"method": "StringBuilder",
46+
"signature": "StringBuilder(String p0)",
47+
"sink_args": [],
48+
"type": "taint-propagator"
49+
},
50+
{
51+
"package": "java.lang",
52+
"class": "StringBuilder",
53+
"method": "toString",
54+
"signature": "String toString()",
55+
"sink_args": [],
56+
"type": "taint-propagator"
57+
},
58+
{
59+
"package": "java.lang",
60+
"class": "String",
61+
"method": "substring",
62+
"signature": "String substring(int p0, int p1)",
63+
"sink_args": [],
64+
"type": "taint-propagator"
65+
},
66+
{
67+
"package": "java.lang",
68+
"class": "StringBuilder",
69+
"method": "append",
70+
"signature": "StringBuilder append(int p0)",
71+
"sink_args": [],
72+
"type": "taint-propagator"
73+
},
74+
{
75+
"package": "java.lang",
76+
"class": "AbstractStringBuilder",
77+
"method": "substring",
78+
"signature": "String substring(int p0, int p1)",
79+
"sink_args": [],
80+
"type": "taint-propagator"
81+
},
82+
{
83+
"package": "java.lang",
84+
"class": "StringBuilder",
85+
"method": "insert",
86+
"signature": "StringBuilder insert(int p0, String p1)",
87+
"sink_args": [],
88+
"type": "taint-propagator"
89+
},
90+
{
91+
"package": "java.lang",
92+
"class": "String",
93+
"method": "getBytes",
94+
"signature": "byte[] getBytes(String p0)",
95+
"sink_args": [],
96+
"type": "taint-propagator"
97+
},
98+
{
99+
"package": "java.lang",
100+
"class": "Appendable",
101+
"method": "append",
102+
"signature": "Appendable append(char p0)",
103+
"sink_args": [],
104+
"type": "taint-propagator"
105+
},
106+
{
107+
"package": "java.lang",
108+
"class": "String",
109+
"method": "format",
110+
"signature": "String format(Locale p0, String p1, Object[] p2)",
111+
"sink_args": [],
112+
"type": "taint-propagator"
113+
},
114+
{
115+
"package": "java.lang",
116+
"class": "String",
117+
"method": "format",
118+
"signature": "String format(String p0, Object[] p1)",
119+
"sink_args": [],
120+
"type": "taint-propagator"
121+
},
122+
{
123+
"package": "java.lang",
124+
"class": "StringBuilder",
125+
"method": "appendCodePoint",
126+
"signature": "StringBuilder appendCodePoint(int p0)",
127+
"sink_args": [],
128+
"type": "taint-propagator"
129+
}
130+
]

‎.github/cached_output/jenkinsci__docker-commons-plugin_CVE-2022-20617_1.17/llm_labelled_sink_apis.json‎

Lines changed: 213 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,213 @@
1+
[
2+
{
3+
"package": "com.cloudbees.plugins.credentials.domains",
4+
"class": "HostnameRequirement",
5+
"method": "HostnameRequirement",
6+
"signature": "HostnameRequirement(String p0)",
7+
"sink_args": [
8+
"p0"
9+
],
10+
"type": "sink"
11+
},
12+
{
13+
"package": "java.util.logging",
14+
"class": "Logger",
15+
"method": "log",
16+
"signature": "void log(Level p0, String p1, Throwable p2)",
17+
"sink_args": [
18+
"p1"
19+
],
20+
"type": "sink"
21+
},
22+
{
23+
"package": "java.lang",
24+
"class": "Boolean",
25+
"method": "getBoolean",
26+
"signature": "boolean getBoolean(String p0)",
27+
"sink_args": [
28+
"p0"
29+
],
30+
"type": "sink"
31+
},
32+
{
33+
"package": "java.io",
34+
"class": "File",
35+
"method": "exists",
36+
"signature": "boolean exists()",
37+
"type": "sink",
38+
"sink_args": [
39+
"this"
40+
]
41+
},
42+
{
43+
"package": "org.apache.commons.io",
44+
"class": "FileUtils",
45+
"method": "writeStringToFile",
46+
"signature": "void writeStringToFile(File p0, String p1, String p2)",
47+
"sink_args": [
48+
"p1"
49+
],
50+
"type": "sink"
51+
},
52+
{
53+
"package": "hudson",
54+
"class": "FilePath",
55+
"method": "write",
56+
"signature": "void write(String p0, String p1)",
57+
"sink_args": [
58+
"p0",
59+
"p1"
60+
],
61+
"type": "sink"
62+
},
63+
{
64+
"package": "com.cloudbees.plugins.credentials.domains",
65+
"class": "URIRequirementBuilder",
66+
"method": "fromUri",
67+
"signature": "URIRequirementBuilder fromUri(String p0)",
68+
"sink_args": [
69+
"p0"
70+
],
71+
"type": "sink"
72+
},
73+
{
74+
"package": "hudson",
75+
"class": "ProcStarter",
76+
"method": "cmds",
77+
"signature": "ProcStarter cmds(ArgumentListBuilder p0)",
78+
"sink_args": [
79+
"p0"
80+
],
81+
"type": "sink"
82+
},
83+
{
84+
"package": "hudson.util",
85+
"class": "ArgumentListBuilder",
86+
"method": "add",
87+
"signature": "ArgumentListBuilder add(Object p0)",
88+
"sink_args": [
89+
"p0"
90+
],
91+
"type": "sink"
92+
},
93+
{
94+
"package": "hudson.util",
95+
"class": "ArgumentListBuilder",
96+
"method": "add",
97+
"signature": "ArgumentListBuilder add(String p0, boolean p1)",
98+
"sink_args": [
99+
"p0"
100+
],
101+
"type": "sink"
102+
},
103+
{
104+
"package": "hudson.util",
105+
"class": "ArgumentListBuilder",
106+
"method": "ArgumentListBuilder",
107+
"signature": "ArgumentListBuilder(String[] p0)",
108+
"sink_args": [
109+
"p0"
110+
],
111+
"type": "sink"
112+
},
113+
{
114+
"package": "hudson.model",
115+
"class": "Node",
116+
"method": "createPath",
117+
"signature": "FilePath createPath(String p0)",
118+
"sink_args": [
119+
"p0"
120+
],
121+
"type": "sink"
122+
},
123+
{
124+
"package": "hudson",
125+
"class": "FilePath",
126+
"method": "copyFrom",
127+
"signature": "void copyFrom(URL p0)",
128+
"sink_args": [
129+
"p0"
130+
],
131+
"type": "sink"
132+
},
133+
{
134+
"package": "hudson.model",
135+
"class": "TaskListener",
136+
"method": "error",
137+
"signature": "PrintWriter error(String p0)",
138+
"sink_args": [
139+
"p0"
140+
],
141+
"type": "sink"
142+
},
143+
{
144+
"package": "org.jenkinsci.plugins.workflow.job",
145+
"class": "WorkflowJob",
146+
"method": "scheduleBuild2",
147+
"signature": "QueueTaskFuture<WorkflowRun> scheduleBuild2(int p0, Action[] p1)",
148+
"type": "sink",
149+
"sink_args": [
150+
"p1"
151+
]
152+
},
153+
{
154+
"package": "java.lang",
155+
"class": "Class",
156+
"method": "getResourceAsStream",
157+
"signature": "InputStream getResourceAsStream(String p0)",
158+
"sink_args": [
159+
"p0"
160+
],
161+
"type": "sink"
162+
},
163+
{
164+
"package": "org.jvnet.hudson.test",
165+
"class": "JenkinsRule",
166+
"method": "submit",
167+
"signature": "HtmlPage submit(HtmlForm p0)",
168+
"type": "sink",
169+
"sink_args": [
170+
"p0"
171+
]
172+
},
173+
{
174+
"package": "org.jvnet.hudson.test",
175+
"class": "WebClient",
176+
"method": "goTo",
177+
"signature": "HtmlPage goTo(String p0)",
178+
"sink_args": [
179+
"p0"
180+
],
181+
"type": "sink"
182+
},
183+
{
184+
"package": "java.io",
185+
"class": "File",
186+
"method": "list",
187+
"signature": "String[] list()",
188+
"type": "sink",
189+
"sink_args": [
190+
"this"
191+
]
192+
},
193+
{
194+
"package": "org.apache.commons.io",
195+
"class": "FileUtils",
196+
"method": "write",
197+
"signature": "void write(File p0, CharSequence p1)",
198+
"sink_args": [
199+
"p1"
200+
],
201+
"type": "sink"
202+
},
203+
{
204+
"package": "hudson",
205+
"class": "ProcStarter",
206+
"method": "cmds",
207+
"signature": "ProcStarter cmds(String[] p0)",
208+
"sink_args": [
209+
"p0"
210+
],
211+
"type": "sink"
212+
}
213+
]

0 commit comments

Comments
 (0)