René's URL Explorer Experiment


Title: Java: Promote Insecure Spring Boot Actuator Configuration query from experimental by jcogs33 · Pull Request #20006 · github/codeql · GitHub

Open Graph Title: Java: Promote Insecure Spring Boot Actuator Configuration query from experimental by jcogs33 · Pull Request #20006 · github/codeql

X Title: Java: Promote Insecure Spring Boot Actuator Configuration query from experimental by jcogs33 · Pull Request #20006 · github/codeql

Description: Description This PR promotes java/insecure-spring-actuator-config from experimental as java/spring-boot-exposed-actuators-config (original PR: #5384). Consideration Main changes from the experimental query: Instead of requiring an application.properties file, I've used the pre-existing JavaProperty class which only looks for the .properties extension. Spring allows changing the the applications.properties name, so this update reduces FNs. Added support for version 3.x. Added support for management.endpoint.web.expose. This property is not particularly common, but was available in at least one version 2.x, so I've added it since it was easy to add. Placed the query under CWE-200 instead of CWE-016. CWE-016 is a category, and my understanding from our metadata style guide is that we should use CWEs that are a base/class weakness, not a category. (I did the same for #18793.) Also see inline comments.

Open Graph Description: Description This PR promotes java/insecure-spring-actuator-config from experimental as java/spring-boot-exposed-actuators-config (original PR: #5384). Consideration Main changes from the experiment...

X Description: Description This PR promotes java/insecure-spring-actuator-config from experimental as java/spring-boot-exposed-actuators-config (original PR: #5384). Consideration Main changes from the experiment...

Opengraph URL: https://github.com/github/codeql/pull/20006

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:3f0f99f0-a5e9-2263-80cf-6ed215a0003a
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idE46A:2F0FC4:5BB171:7C565B:6A4C7A89
html-safe-noncef521b827d1209e3f2f44399346336edac27e8c1ffdca4ea88272ca858995a80b
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFNDZBOjJGMEZDNDo1QkIxNzE6N0M1NjVCOjZBNEM3QTg5IiwidmlzaXRvcl9pZCI6IjI2NjA1MTg3NTYwMTA5ODIwMjUiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac562437b998ad633a7628346381d6863986a9fc38c121b91d679ea74a34481af9
hovercard-subject-tagpull_request:2653943830
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/20006/files
twitter:imagehttps://avatars.githubusercontent.com/u/57204504?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/57204504?s=400&v=4
og:image:altDescription This PR promotes java/insecure-spring-actuator-config from experimental as java/spring-boot-exposed-actuators-config (original PR: #5384). Consideration Main changes from the experiment...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release56ac743bebb13694b888673bb7257f4b97a4b7fd
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/20006/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20006%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20006%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/20006/files
Reloadhttps://github.com/github/codeql/pull/20006/files
Reloadhttps://github.com/github/codeql/pull/20006/files
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
jcogs33https://github.com/jcogs33
github:mainhttps://github.com/github/codeql/tree/main
jcogs33:jcogs33/java/insecure-spring-actuator-config-promotionhttps://github.com/jcogs33/codeql/tree/jcogs33/java/insecure-spring-actuator-config-promotion
Conversation 20 https://github.com/github/codeql/pull/20006
Findings https://github.com/github/codeql/pull/20006/findings
Commits 23 https://github.com/github/codeql/pull/20006/commits
Checks 13 https://github.com/github/codeql/pull/20006/checks
Files changed https://github.com/github/codeql/pull/20006/files
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
Java: Promote Insecure Spring Boot Actuator Configuration query from experimental https://github.com/github/codeql/pull/20006/files#top
Show all changes 23 commits https://github.com/github/codeql/pull/20006/files
a39cb40 Java: copy out of experimental Jul 9, 2025 https://github.com/github/codeql/pull/20006/commits/a39cb401777d693be6c3cb63220251f27f6c5174
0dbddbd Java: remove experimental files Jul 9, 2025 https://github.com/github/codeql/pull/20006/commits/0dbddbdf0f5787d8ea92bc6f6132447a110b5b91
38260e7 Java: remove deprecation Jul 10, 2025 https://github.com/github/codeql/pull/20006/commits/38260e76bfa271483123f330a644153b7ae5ef26
fc930d9 Java: update tests for non-experimental directory Jul 10, 2025 https://github.com/github/codeql/pull/20006/commits/fc930d918463721587fdc02f1a494493e26a8487
ed8da5e Java: convert tests to inline expectations Jul 14, 2025 https://github.com/github/codeql/pull/20006/commits/ed8da5e151d29c127f0e099590af62ac6d310477
b479f5c Java: fix integration tests Jul 14, 2025 https://github.com/github/codeql/pull/20006/commits/b479f5c8dcbfc7e0cce817833496e076b0a9d2c3
1b90a30 Java: move code to .qll file Jul 15, 2025 https://github.com/github/codeql/pull/20006/commits/1b90a30d458aec0aee191ae3a6acbccb0a6b0eab
3823186 Java: split tests by versions Jul 15, 2025 https://github.com/github/codeql/pull/20006/commits/3823186dc6dc53c87fdd143fbf6d7d95dbbe4e8e
2bfc4b4 Java: fix test case for version 1.4 Jul 15, 2025 https://github.com/github/codeql/pull/20006/commits/2bfc4b4ee207a23905eb9ce64bc84b735d83a77f
ae163a9 Java: add overlay annotations Jul 16, 2025 https://github.com/github/codeql/pull/20006/commits/ae163a9f36c0a3d08f6c78404a438bfc7101cf96
0d2a422 Java: add related location to alert message Jul 16, 2025 https://github.com/github/codeql/pull/20006/commits/0d2a4222fd14fd2290b462d990efa10026d7efb7
afa6610 Java: update qhelp Jul 17, 2025 https://github.com/github/codeql/pull/20006/commits/afa6610cb9978b6a283e5c8dc9700781bf062d6f
ea35fbb Java: support version 3.x Jul 17, 2025 https://github.com/github/codeql/pull/20006/commits/ea35fbbe3b0183ca22e94f5a7b4c0d96513c9cd4
7d5e939 Java: minor refactoring Jul 17, 2025 https://github.com/github/codeql/pull/20006/commits/7d5e939a8604db18981a694d5a27369807474adc
ea529b0 Java: adjust metadata and alert msg Jul 17, 2025 https://github.com/github/codeql/pull/20006/commits/ea529b047b0223d025b0009fb95c944196a71da8
70d5150 Java: rename to align with 'java/spring-boot-exposed-actuators' query Jul 17, 2025 https://github.com/github/codeql/pull/20006/commits/70d51504a7372e265c0a4b500e4030590d27a8f3
8decc13 Java: add change note Jul 17, 2025 https://github.com/github/codeql/pull/20006/commits/8decc136c41155adfb10c266335e02a159777f99
685f68d Java: support 'management.endpoints.web.expose' property Jul 18, 2025 https://github.com/github/codeql/pull/20006/commits/685f68d9d39f3942864eacd1daef6cd742e1eba8
7250265 Java: consider all endpoints except for health and info as sensitive … Jul 18, 2025 https://github.com/github/codeql/pull/20006/commits/7250265c1f109ae9a80e695dc316b8ac3f39285f
0dd33b2 Java: remove version debugging from alert message Jul 19, 2025 https://github.com/github/codeql/pull/20006/commits/0dd33b273437cfa85904760e6f4b9366fca12a81
c9692a6 Java: fix test failures cause by alert msg change Jul 19, 2025 https://github.com/github/codeql/pull/20006/commits/c9692a6d105cbfc1015804f6ac891704fb1f13c4
f0542dd Java: add summary to change note Aug 22, 2025 https://github.com/github/codeql/pull/20006/commits/f0542dd828850020d8f673104bfedd436f46b27a
3675e4b Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config… jcogs33 Aug 26, 2025 https://github.com/github/codeql/pull/20006/commits/3675e4bb4f904139c040a5ee7c707a6c19719552
Clear filters https://github.com/github/codeql/pull/20006/files
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
java-code-scanning.qls.expected https://github.com/github/codeql/pull/20006/files#diff-5e2fdd3fb21afc9e663456b86075c3f0557adeb508c661a7bdba0d1eb58758d6
java-security-and-quality.qls.expected https://github.com/github/codeql/pull/20006/files#diff-b905608cb3922999ba356f37ae5fced0ceda0ea953b8c8a3d1f00017530fcea5
java-security-extended.qls.expected https://github.com/github/codeql/pull/20006/files#diff-e055725e3b957db2ad82f791dd34dd9139ca2e2cb0d86a547f3e702b52147be0
not_included_in_qls.expected https://github.com/github/codeql/pull/20006/files#diff-99c5fe89cde3fde0356728ef3180ded3342edf9579a58d64c5a7433c8d2169d0
ConfigFiles.qll https://github.com/github/codeql/pull/20006/files#diff-e01f8583a776e73ebaddb666678f41bec6603973be3225c53d67c7805cbaf8a3
SpringBootActuatorsConfigQuery.qll https://github.com/github/codeql/pull/20006/files#diff-af9792fd4f4d3ba53d6cbb45aec9953fbf79d79cd5bf919eb0a49a1f4fd7bfe4
SpringBootActuatorsConfig.qhelp https://github.com/github/codeql/pull/20006/files#diff-b18872b3bf4650d516ea9b508d7f780636f412fd2d6aacd1a8ae6914f9f18bcb
SpringBootActuatorsConfig.ql https://github.com/github/codeql/pull/20006/files#diff-8e068bf077545f495db0b3acf0f9a75f4c7b45c5a0373f6843947ed93969d197
application_bad.properties https://github.com/github/codeql/pull/20006/files#diff-ab42f0ea0f14c8bf9bac0514ae06837a5d09556e1b8ab7709dbd11f9bb52833e
application_good.properties https://github.com/github/codeql/pull/20006/files#diff-d0a95801ba8ea9ddac2fd5932b5b8ecb981c9bc5a2ae0ac7fd5cc2b48da6bfe2
pom_good.xml https://github.com/github/codeql/pull/20006/files#diff-2b29c79f05092a8157aa94cf7aa3da4e770a2d8081361d9a3d20f9317ebca37b
2025-07-17-spring-actuators-config-promo.md https://github.com/github/codeql/pull/20006/files#diff-06631b841e95fbf57677d95bf6cf668d71881caeae70d3b70251820d022d01c2
InsecureSpringActuatorConfig.qhelp https://github.com/github/codeql/pull/20006/files#diff-e6b763d97ecaafc2af4a9c534442dfda51166d4141c1b6011277b085eb0c1ac4
InsecureSpringActuatorConfig.ql https://github.com/github/codeql/pull/20006/files#diff-72d70392cb602efd44f89942eff3b760069bddafac49f17da48c18683bd00543
application.properties https://github.com/github/codeql/pull/20006/files#diff-bb3cdc27af5bae0cb3b9b6da1dbddccff02b9a7c2a442ecb7cb421282e54c151
InsecureSpringActuatorConfig.expected https://github.com/github/codeql/pull/20006/files#diff-929faa71811ddb144d471d26ad83b38cd187b8eaa19d31b28e1b756af94aae40
InsecureSpringActuatorConfig.qlref https://github.com/github/codeql/pull/20006/files#diff-6c4361760934b09f6e718b24f8a6a2047a23e04179f95bee091e895a5fcd8278
SensitiveInfo.java https://github.com/github/codeql/pull/20006/files#diff-466f4ca1f6325ebb33daf9f4b95187419c4194361f837deb230d94ef7005b900
application.properties https://github.com/github/codeql/pull/20006/files#diff-3268a0f40170c4c026522486c83acef4e16840956b76cb2c4a689c1acbaee371
SpringBootActuatorsConfig.expected https://github.com/github/codeql/pull/20006/files#diff-e1a80e20175b882fbff78332728f03e000a7aa61ccb8016b6608c0b6a93c96eb
SpringBootActuatorsConfig.qlref https://github.com/github/codeql/pull/20006/files#diff-3734b58451fa7c96eddeab4b5e64cb964c69003e61e7d1674e6971cbd4221a54
application.properties https://github.com/github/codeql/pull/20006/files#diff-4a5f2269f119fc6998457c1cc46716c480410ad624137fe7252a59303b1bf1ca
pom.xml https://github.com/github/codeql/pull/20006/files#diff-41420f62b2164a9d00e8c1c07e654d69f559d9776a70b53e9516de66f17e6ec7
application.properties https://github.com/github/codeql/pull/20006/files#diff-01c44a30639fd14e5be3895e4640fa4cf7d0c81c1d62cb2fcebc6d7267935757
pom.xml https://github.com/github/codeql/pull/20006/files#diff-62a707c6639f1a5182da8349878544163cf3724b1c853d6ead3596639d228972
application.properties https://github.com/github/codeql/pull/20006/files#diff-28796267ecb52a851cb4015461bc8d6fe6618a713dcfea8ba717807c41f9527d
pom.xml https://github.com/github/codeql/pull/20006/files#diff-954b99c4f3a8464f6f7d60168cbee742504035eabaf26e707c57ce97c26ed8f5
application.properties https://github.com/github/codeql/pull/20006/files#diff-90bc9b705121d0d8cb69d102d0eef39a8c66f01c441ca9410e76d30d576126b1
pom.xml https://github.com/github/codeql/pull/20006/files#diff-9f98be946b0dc8198f3430569c92b7016d27ca7221c76fa21d074e1adcce4636
application.properties https://github.com/github/codeql/pull/20006/files#diff-7ff8979366bdbeaa1d9a7c7f1afcb9494d2c92a1b89144739ff9e3a192dcf83b
pom.xml https://github.com/github/codeql/pull/20006/files#diff-ff1a4d7121d7f144b4f925b534edea1d4e401ca846e309e43288c8b3aa34ca1f
application.properties https://github.com/github/codeql/pull/20006/files#diff-5e3ad465d6a5a626bfbfba82e3f193dcdd6bcdc0cf1fd458bb61aee42b14ef16
pom.xml https://github.com/github/codeql/pull/20006/files#diff-8c48dd9bc23b9dcdf4515f207a5da1567e7f25b97ffeb2d51bc2cfb17e481360
application.properties https://github.com/github/codeql/pull/20006/files#diff-3a3a0a32f0ffb2be9da544abf16e6423d9c8cff1da9547cb350f1c85c264769f
pom.xml https://github.com/github/codeql/pull/20006/files#diff-4302f21ce55b83dc522a93a7204adb920f198628571dbc8cc3e7298d898c4644
application.properties https://github.com/github/codeql/pull/20006/files#diff-efec8ffca103e2ca029f96d988d3becdcc1cd1dd313a9f544a3cc27232799053
pom.xml https://github.com/github/codeql/pull/20006/files#diff-a2185dc746fb45733b64669c593b0b95be3f12377f78fd7954bfb8f324c64d90
application.properties https://github.com/github/codeql/pull/20006/files#diff-c6c5998cc4e00a19305452c4b07de149ca3f50ba95ae3d02f968e229f638c7f8
pom.xml https://github.com/github/codeql/pull/20006/files#diff-a2178551be0e3269e0e578b87dea9fcf87ebd32958b3a0ebe4c957e13f938f08
application.properties https://github.com/github/codeql/pull/20006/files#diff-a4e574b39b6c06b58e2190f9089ed950afb069ebda716d1dae2f5b7aa530b7c8
pom.xml https://github.com/github/codeql/pull/20006/files#diff-6943b81175251d2b9a928099b3ba86586888cb0f920ef93c6acf9a933fdb18b5
application.properties https://github.com/github/codeql/pull/20006/files#diff-37de993a4255fe62e4f4862fbcec860b3e8a5db35c764db61350079a152427d2
pom.xml https://github.com/github/codeql/pull/20006/files#diff-bde9bad6c861062ab9cd8b7dc93b26e0450c39aec1ffe7486be46208c3cd9378
application.properties https://github.com/github/codeql/pull/20006/files#diff-dee82ac6c5d3d9742a51a8eff94863d983cf61bb7dd1c22b503e7d8b736a9269
pom.xml https://github.com/github/codeql/pull/20006/files#diff-3cb9b9064a01c3c8cbd21c67451c75b3a8250a5f22fb42895afd26953feca2cd
options https://github.com/github/codeql/pull/20006/files#diff-6450b9e95b68712a4a2b59b904aeeda0b41d8e748df89fc2cd390a71445e3747
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/integration-tests/java/query-suite/java-code-scanning.qls.expectedhttps://github.com/github/codeql/pull/20006/files#diff-5e2fdd3fb21afc9e663456b86075c3f0557adeb508c661a7bdba0d1eb58758d6
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/integration-tests/java/query-suite/java-code-scanning.qls.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20006/files#diff-5e2fdd3fb21afc9e663456b86075c3f0557adeb508c661a7bdba0d1eb58758d6
https://github.com/github/codeql/pull/20006/files#diff-5e2fdd3fb21afc9e663456b86075c3f0557adeb508c661a7bdba0d1eb58758d6
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/integration-tests/java/query-suite/java-security-and-quality.qls.expectedhttps://github.com/github/codeql/pull/20006/files#diff-b905608cb3922999ba356f37ae5fced0ceda0ea953b8c8a3d1f00017530fcea5
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/integration-tests/java/query-suite/java-security-and-quality.qls.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20006/files#diff-b905608cb3922999ba356f37ae5fced0ceda0ea953b8c8a3d1f00017530fcea5
https://github.com/github/codeql/pull/20006/files#diff-b905608cb3922999ba356f37ae5fced0ceda0ea953b8c8a3d1f00017530fcea5
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/integration-tests/java/query-suite/java-security-extended.qls.expectedhttps://github.com/github/codeql/pull/20006/files#diff-e055725e3b957db2ad82f791dd34dd9139ca2e2cb0d86a547f3e702b52147be0
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/integration-tests/java/query-suite/java-security-extended.qls.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20006/files#diff-e055725e3b957db2ad82f791dd34dd9139ca2e2cb0d86a547f3e702b52147be0
https://github.com/github/codeql/pull/20006/files#diff-e055725e3b957db2ad82f791dd34dd9139ca2e2cb0d86a547f3e702b52147be0
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/integration-tests/java/query-suite/not_included_in_qls.expectedhttps://github.com/github/codeql/pull/20006/files#diff-99c5fe89cde3fde0356728ef3180ded3342edf9579a58d64c5a7433c8d2169d0
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/integration-tests/java/query-suite/not_included_in_qls.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20006/files#diff-99c5fe89cde3fde0356728ef3180ded3342edf9579a58d64c5a7433c8d2169d0
https://github.com/github/codeql/pull/20006/files#diff-99c5fe89cde3fde0356728ef3180ded3342edf9579a58d64c5a7433c8d2169d0
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/configfiles/ConfigFiles.qllhttps://github.com/github/codeql/pull/20006/files#diff-e01f8583a776e73ebaddb666678f41bec6603973be3225c53d67c7805cbaf8a3
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/lib/semmle/code/configfiles/ConfigFiles.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20006/files#diff-e01f8583a776e73ebaddb666678f41bec6603973be3225c53d67c7805cbaf8a3
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/SpringBootActuatorsConfigQuery.qllhttps://github.com/github/codeql/pull/20006/files#diff-af9792fd4f4d3ba53d6cbb45aec9953fbf79d79cd5bf919eb0a49a1f4fd7bfe4
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/lib/semmle/code/java/security/SpringBootActuatorsConfigQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/SpringBootActuatorsConfig.qhelphttps://github.com/github/codeql/pull/20006/files#diff-b18872b3bf4650d516ea9b508d7f780636f412fd2d6aacd1a8ae6914f9f18bcb
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/SpringBootActuatorsConfig.qhelp
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/SpringBootActuatorsConfig.qlhttps://github.com/github/codeql/pull/20006/files#diff-8e068bf077545f495db0b3acf0f9a75f4c7b45c5a0373f6843947ed93969d197
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/SpringBootActuatorsConfig.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
michaelnebelhttps://github.com/michaelnebel
Aug 27, 2025https://github.com/github/codeql/pull/20006/files#r2302997682
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
owen-mchttps://github.com/owen-mc
Aug 27, 2025https://github.com/github/codeql/pull/20006/files#r2303356060
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
jcogs33https://github.com/jcogs33
Aug 27, 2025https://github.com/github/codeql/pull/20006/files#r2304181705
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/application_bad.propertieshttps://github.com/github/codeql/pull/20006/files#diff-ab42f0ea0f14c8bf9bac0514ae06837a5d09556e1b8ab7709dbd11f9bb52833e
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/application_bad.properties
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/application_good.propertieshttps://github.com/github/codeql/pull/20006/files#diff-d0a95801ba8ea9ddac2fd5932b5b8ecb981c9bc5a2ae0ac7fd5cc2b48da6bfe2
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/application_good.properties
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/pom_good.xmlhttps://github.com/github/codeql/pull/20006/files#diff-2b29c79f05092a8157aa94cf7aa3da4e770a2d8081361d9a3d20f9317ebca37b
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/src/Security/CWE/CWE-200/SpringBootActuatorsConfig/pom_good.xml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/change-notes/2025-07-17-spring-actuators-config-promo.mdhttps://github.com/github/codeql/pull/20006/files#diff-06631b841e95fbf57677d95bf6cf668d71881caeae70d3b70251820d022d01c2
View file https://github.com/jcogs33/codeql/blob/3675e4bb4f904139c040a5ee7c707a6c19719552/java/ql/src/change-notes/2025-07-17-spring-actuators-config-promo.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20006/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.qhelphttps://github.com/github/codeql/pull/20006/files#diff-e6b763d97ecaafc2af4a9c534442dfda51166d4141c1b6011277b085eb0c1ac4
View file https://github.com/github/codeql/blob/d5f4a3961e65c4c40e9b1362e37eb48f36220d98/java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.qhelp
Open in desktop https://desktop.github.com
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
Please reload this pagehttps://github.com/github/codeql/pull/20006/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.