Tom Hvitved
Tom Hvitved
Correct, we do not officially support pre-releases for C#.
We updated the C# extractor [back in December](https://github.com/github/codeql/pull/6791) to use the latest version of `Microsoft.CodeAnalysis.CSharp` (Roslyn), which means that we will be able to partially support C# 10 code bases...
I have added a request for `ubuntu-latest` to include .NET 6 here: https://github.com/actions/virtual-environments/issues/4851.
@tamasvajk : Can you please approve as well?
> Any idea of what could be the root cause? Thanks Yeah, you need the latest `codeql` CLI, where this bug has been fixed.
> Perhaps this isn't possible, but could you always return both asts? They could be created as two top level nodes and the user would be able to see both...
> I believe Ruby's solution so far is to make type-tracking steps explicitly depend on non-library callables only. The downside here is that none of their standard library models are...
> They are [mostly in `DataFlowPrivate.qll`](https://github.com/github/codeql/pull/8781/files#diff-80716eaf55e2581b856950d844a39de74e7015eb05fb3fb56ea89662c13e56fdR366-R873) and then [one in `DataFlowUtil.qll`](https://github.com/github/codeql/pull/8781/files#diff-4dec1c684b92d3ebc9760e57f26bb633b8eb34090b32f56736f6273c7a996b36R13-R19). I followed the structure from Ruby closely. The interface does not let you search for these terms inside collapsed...
> * The new alerts are all for queries that use StoredFlowSource as a source of taint and the first step is opening a FileStream, which makes sense, since we...
> the references code is not included in the compilation of the project 🤦