Add Ruby to gen script and exclude query

.github/scripts/generate-coverage.py

@@ -22,6 +22,7 @@
     "java": "Java",
     "javascript": "JavaScript / TypeScript",
     "python": "Python",
+    "ruby": "Ruby",
 }
 default_suite_order = [
     "default",
@@ -211,7 +212,7 @@ def buildQueries(language: str):
     all_languages = False
     languages = []
     if not arguments.language:
-        languages = ["cpp", "csharp", "java", "javascript", "python"]
+        languages = ["cpp", "csharp", "java", "javascript", "python", "ruby"]
         all_languages = True
     else:
         languages = [arguments.language]

ruby/README.md

@@ -0,0 +1,20 @@
+# Python
+
+## Queries
+<!-- AUTOMATION-QUERIES -->
+| Name | Severity | Path |
+| :--- | :------- | :--- |
+
+
+<!-- AUTOMATION-QUERIES -->
+## Query Suites
+<!-- AUTOMATION-SUITES -->
+| Name | Queries Count | Description | Path |
+| :--- | :---- | :--- | :--- |
+| `default` | 22 | Default Query Suite | `code-scanning` |
+| `extended` | 24 | Security Extended Suite | `security-extended` |
+| `quality` | 24 | Security and Quality Extended Suite | `security-and-quality` |
+| `super-extended` | 23 | Security Extended with Experimental and Custom Queries Suite | `advanced-security/codeql-queries/ruby/suites/codeql-ruby.qls@main` |
+
+
+<!-- AUTOMATION-SUITES -->

ruby/queries.json

@@ -0,0 +1,103 @@
+{
+  "default": [
+    "codeql/ruby/ql/src/queries/security/cwe-094/CodeInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-601/UrlRedirect.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-918/ServerSideRequestForgery.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-089/SqlInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-116/BadTagFilter.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/ReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/PolynomialReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-352/CSRFProtectionDisabled.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-502/UnsafeDeserialization.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-022/PathInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-611/Xxe.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/CommandInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/ReflectedXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/StoredXSS.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/ExtractionErrors.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/SuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfFilesExtractedWithErrors.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfCode.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfSuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfUserCode.ql"
+  ],
+  "extended": [
+    "codeql/ruby/ql/src/queries/security/cwe-094/CodeInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-601/UrlRedirect.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-918/ServerSideRequestForgery.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-089/SqlInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-116/BadTagFilter.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/ReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/PolynomialReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-352/CSRFProtectionDisabled.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-502/UnsafeDeserialization.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-022/PathInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-611/Xxe.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/CommandInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/ReflectedXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/StoredXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-798/HardcodedCredentials.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/ExtractionErrors.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/SuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfFilesExtractedWithErrors.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfCode.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfSuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfUserCode.ql"
+  ],
+  "quality": [
+    "codeql/ruby/ql/src/queries/security/cwe-094/CodeInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-601/UrlRedirect.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-918/ServerSideRequestForgery.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-089/SqlInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-116/BadTagFilter.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/ReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/PolynomialReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-352/CSRFProtectionDisabled.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-502/UnsafeDeserialization.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-022/PathInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-611/Xxe.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/CommandInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/ReflectedXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/StoredXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-798/HardcodedCredentials.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/ExtractionErrors.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/SuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfFilesExtractedWithErrors.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfCode.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfSuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfUserCode.ql"
+  ],
+  "super-extended": [
+    "codeql/ruby/ql/src/queries/security/cwe-094/CodeInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-601/UrlRedirect.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-918/ServerSideRequestForgery.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-089/SqlInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-116/BadTagFilter.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/ReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-1333/PolynomialReDoS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-352/CSRFProtectionDisabled.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-502/UnsafeDeserialization.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-022/PathInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-611/Xxe.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/CommandInjection.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/ReflectedXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-079/StoredXSS.ql",
+    "codeql/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/ExtractionErrors.ql",
+    "codeql/ruby/ql/src/queries/diagnostics/SuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfFilesExtractedWithErrors.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfCode.ql",
+    "codeql/ruby/ql/src/queries/summary/NumberOfSuccessfullyExtractedFiles.ql",
+    "codeql/ruby/ql/src/queries/summary/LinesOfUserCode.ql"
+  ]
+}

ruby/suites/codeql-ruby.qls

@@ -7,3 +7,6 @@
 
 - import: codeql-suites/ruby-security-extended.qls
   from: codeql/ruby-queries
+- exclude:
+    id:
+      - rb/hardcoded-credentials