Mobile-Security-Framework-MobSF/.github/codeql-config.yml at dependabot/github_actions/github/codeql-action/init-4.38.2 - Mobile-Security-Framework-MobSF - Gitea: Git with a cup of tea

MobSF/Mobile-Security-Framework-MobSF

mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00

Files

T

Ajin Abraham b5da756615 4.2.0 (#2450 )

- Added malware lookup using SHA2 with VirusTotal, Triage, Hybrid Analysis, and MetaDefender.
- Fixed permissions of extracted files to counter anti-analysis techniques.
- Resolved APK parsing errors in `androguard`.
- Handled exceptions in `string_on_binary`.
- Optimized APK ZIP analysis for improved performance.
- Fixed untar permission errors in dynamic analysis.
- Added bypass for SSL pinning in Boye's `AbstractVerifier`.
- Updated bypass for SSL pinning in Appmattus's `CertificateTransparencyInterceptor`.
- Introduced SSL pinning detector script.
- Improved Frida intent dumper script.
- Added Frida intent tracer script.
- Introduced timeouts for all HTTP calls.
- Added `django-q2`-based asynchronous scans for Android and iOS binaries and source code.
- Fixed bug in certificate analysis.
- Enabled asynchronous scans in Docker Compose setup.
- Performed QA for Android and iOS SAST modules.
- Added Frida script for `audit-webview`.
- Introduced Frida script for `trace-javascript-interface`.
- Upgraded `libsast` for improved file reading, multiprocessing, and multithreading.
- Fixed PNG crush issues on Darwin systems.
- Performed QA on the home screen UI.
- Updated `httptools` and `libsast` dependencies.

2024-11-17 22:26:06 -08:00

13 lines

196 B

YAML

Raw Permalink Blame History

 name: "CodeQL config"
 queries:
   - uses: security-extended
 query-filters:
   - exclude:
       id: py/path-injection  # To much false positives
 paths-ignore:
   - "**/.git/**"
   - "**/.github/**"