KEMBAR78
add CodeQL suppressions for UpdatableHelp and NativeCommandProcessor methods by anamnavi · Pull Request #26132 · PowerShell/PowerShell · GitHub
Skip to content

Conversation

@anamnavi
Copy link
Member

@anamnavi anamnavi commented Oct 1, 2025

This pull request includes several comments added to the code to address CodeQL warnings in the PowerShell codebase. The comments explain why the flagged issues are expected behavior and not security concerns. The comments specifically address CodeQL warnings for command-line injection and server-side request forgery (SSRF)

PR Summary

PR Context

PR Checklist

@TravisEz13 TravisEz13 self-assigned this Oct 1, 2025
@TravisEz13 TravisEz13 added the CL-General Indicates that a PR should be marked as a general cmdlet change in the Change Log label Oct 1, 2025
@daxian-dbw
Copy link
Member

/azp run PowerShell-CI-linux-packaging, PowerShell-Windows-Packaging-CI

@azure-pipelines
Copy link

Azure Pipelines could not run because the pipeline triggers exclude this branch/path.

@daxian-dbw daxian-dbw merged commit d5267d2 into PowerShell:master Oct 1, 2025
36 of 37 checks passed
@microsoft-github-policy-service
Copy link
Contributor

microsoft-github-policy-service bot commented Oct 1, 2025

📣 Hey @@anamnavi, how did we do? We would love to hear your feedback with the link below! 🗣️

🔗 https://aka.ms/PSRepoFeedback

@daxian-dbw daxian-dbw added CL-Tools Indicates that a PR should be marked as a tools change in the Change Log and removed CL-General Indicates that a PR should be marked as a general cmdlet change in the Change Log labels Oct 1, 2025
pwshBot pushed a commit to pwshBot/PowerShell that referenced this pull request Oct 9, 2025
pwshBot pushed a commit to pwshBot/PowerShell that referenced this pull request Oct 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport-7.4.x-Migrated Backport-7.5.x-Migrated CL-Tools Indicates that a PR should be marked as a tools change in the Change Log

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants