codeql-coding-standards
codeql-coding-standards copied to clipboard
This repository contains CodeQL queries and libraries which support various Coding Standards.
**Describe the bug** Implementation of Rule A1-1-1 only looks for deprecated features and not use of implementation extensions **Expected behavior** ``` // __try // Non-compliant - __try is a part...
### Affected rules - `RULE-11-3` ### Description The rule states that "a cast shall not be performed between a pointer to object type and a pointer to a different object...
### Affected rules - `A15-4-2` ### Description [Copy elision](https://en.cppreference.com/w/cpp/language/copy_elision) allows the compiler to omit copy and move construction in certain circumstances. Some of these circumstances are considered "mandatory" - i.e....
### Affected rules - `DCL51-CPP` ### Description The rule currently enforces that function names defined in standard library headers are not reused in any namespace. However, a careful re-reading of...
### Affected rules - M2-13-3 ### Description The test here: https://github.com/github/codeql-coding-standards/blob/main/cpp/autosar/test/rules/M2-13-3/test.cpp Is overly simple and fails to test for octal and binary literals, or literals with a type suffix such...
Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.3 to 3.1.3. Release notes Sourced from jinja2's releases. 3.1.3 This is a fix release for the 3.1.x feature branch. Fix for GHSA-h5c8-rqwp-cp95. You are affected if...
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.37 to 3.1.41. Release notes Sourced from gitpython's releases. 3.1.41 - fix Windows security issue The details about the Windows security issue can be found in this...
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.37 to 3.1.41. Release notes Sourced from gitpython's releases. 3.1.41 - fix Windows security issue The details about the Windows security issue can be found in this...
### Affected rules - `A18-5-8` ### Description _Copy elision_ allows a call to a copy or move constructor to be omitted in certain cases where it is safe to do...
## Description Artifacts retrieved from the repository should be retrieved from the correct HEAD sha. This undoes the commit d2a490 that ensured we always used to the script on main....