mc comments

Results 31 comments of

mc

Improve context on pre-commit hook failures and provide escape hatch

A ➕ to make this happen

Java: Promote Static Initialization Vector query

Covering for the docs first responder here 👋🏻 - I added this PR to our board for review by the Docs team. Thanks for your patience 🙇🏻‍♀️ 😅

Docs: Add CodeQL standard packs and bundle to CodeQL tools page

Covering for the docs first responder here 👋🏻 - I added this PR to our board for review by the Docs team. Thanks for your patience 🙇🏻‍♀️ 😅

[JAVA] Partial Path Traversal Vuln Query

Covering for the docs first responder here 👋🏻 - I added this PR to our board for review by the Docs team. Thanks for your patience 🙇🏻‍♀️ 😅

[JAVA] Partial Path Traversal Vuln Query

Apologies, I am on my own for 2 weeks, and am very busy, but will review this now. Thank you for your patience 🙇🏻‍♀️

JS/RB/PY/Java: add suspicious range query

Docs first responder here 👋🏻 - thanks for the ping! I've put your PR on our review board ✨

Java: query to detect android:debuggable attribute enabled

Covering for the docs first responder here 👋🏻 - I added this PR to our board for review by the Docs team. Thanks for your patience 🙇🏻‍♀️ 😅

Switch `schedule.interval` in examples to `weekly`

Wondering if we should also update these articles with similar changes 🤔 [Configuring Dependabot version updates](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates) - example at the bottom [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot) -...

Switch `schedule.interval` in examples to `weekly`

I am going to merge this as I think it's important we make this change asap and I'll talk to `jeffwidman` about my suggestions.

Warn to wait for checks if using Dependabot auto-merge

I'll review this, have just asked someone from the Dependabot Updates team for help.