Tom Hvitved

Results 40 comments of Tom Hvitved

Correct, we do not officially support pre-releases for C#.

We updated the C# extractor [back in December](https://github.com/github/codeql/pull/6791) to use the latest version of `Microsoft.CodeAnalysis.CSharp` (Roslyn), which means that we will be able to partially support C# 10 code bases...

I have added a request for `ubuntu-latest` to include .NET 6 here: https://github.com/actions/virtual-environments/issues/4851.

@tamasvajk : Can you please approve as well?

> Any idea of what could be the root cause? Thanks Yeah, you need the latest `codeql` CLI, where this bug has been fixed.

> Perhaps this isn't possible, but could you always return both asts? They could be created as two top level nodes and the user would be able to see both...

> I believe Ruby's solution so far is to make type-tracking steps explicitly depend on non-library callables only. The downside here is that none of their standard library models are...

> They are [mostly in `DataFlowPrivate.qll`](https://github.com/github/codeql/pull/8781/files#diff-80716eaf55e2581b856950d844a39de74e7015eb05fb3fb56ea89662c13e56fdR366-R873) and then [one in `DataFlowUtil.qll`](https://github.com/github/codeql/pull/8781/files#diff-4dec1c684b92d3ebc9760e57f26bb633b8eb34090b32f56736f6273c7a996b36R13-R19). I followed the structure from Ruby closely. The interface does not let you search for these terms inside collapsed...

> * The new alerts are all for queries that use StoredFlowSource as a source of taint and the first step is opening a FileStream, which makes sense, since we...

> the references code is not included in the compilation of the project 🤦