Improvement
CodeQL 2.17.4: Autofixes for Extended queries, faster C++ PR scans
CodeQL is the static analysis engine that powers GitHub code scanning. CodeQL version 2.17.4 has been released and has now been rolled out to code scanning users on GitHub.com.
This changelog combines significant updates from the release of CodeQL 2.17.2,2.17.3, and 2.17.4:
- Copilot-powered autofixes are now available for queries that are part of the Extended query suite for languages supported by autofix (JS/TS, Go, Java, C#, Ruby, Python).
- All the local query variants have been removed from Java. Their behaviour can be replicated by using local threat models.
- Better caching for C++ analyses on pull requests improves scan times by a median 12%.
- Added support for C/C++ ZeroMQ (ZMQ) library, the Python pyramid framework and gradio package.
- A new query
cpp/iterator-to-expired-containerto detect the creation of iterator owned by temporary objects that are about to be destroyed. - The
py/header-injectionquery has been promoted to the main query pack and renamed topy/http-response-splitting.
For a full list of changes, please refer to the complete changelog for versions 2.17.2, 2.17.3, and 2.17.4. All new functionality will also be included in GHES 3.14. Users of GHES 3.13 or older can upgrade their CodeQL version.