Skip to content

feat: basic dataflow for context expansion - #640

Merged
woodruffw merged 7 commits into
mainfrom
ww/expanded-contexts
Apr 2, 2025
Merged

woodruffw merged 7 commits into
mainfrom
ww/expanded-contexts

Conversation

@woodruffw

Copy link
Copy Markdown
Member

Fixes #624.

This will make audits like template-injection more precise.

Signed-off-by: William Woodruff william@yossarian.net

WIP. This will make audits like `template-injection` more
precise.

Signed-off-by: William Woodruff <william@yossarian.net>
Signed-off-by: William Woodruff <william@yossarian.net>
Signed-off-by: William Woodruff <william@yossarian.net>
Signed-off-by: William Woodruff <william@yossarian.net>
@woodruffw woodruffw added the enhancement New feature or request label Mar 31, 2025
@woodruffw woodruffw self-assigned this Mar 31, 2025
Signed-off-by: William Woodruff <william@yossarian.net>
@woodruffw
woodruffw merged commit ccd4178 into main Apr 2, 2025
@woodruffw
woodruffw deleted the ww/expanded-contexts branch April 2, 2025 03:44
@woodruffw woodruffw mentioned this pull request Apr 2, 2025
2 tasks done
aldur pushed a commit to aldur/zizmor that referenced this pull request May 5, 2025
* feat: basic dataflow for context expansion

WIP. This will make audits like `template-injection` more
precise.

Signed-off-by: William Woodruff <william@yossarian.net>

* make it work

Signed-off-by: William Woodruff <william@yossarian.net>

* tests

Signed-off-by: William Woodruff <william@yossarian.net>

* fixup, more tests

Signed-off-by: William Woodruff <william@yossarian.net>

* comments

Signed-off-by: William Woodruff <william@yossarian.net>

* rename function, add more tests

* fixup release notes

---------

Signed-off-by: William Woodruff <william@yossarian.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG]: template-injection false-positive

1 participant