Skip to content

Commit d986190

Browse files
data-douserdata-douser
committed
Project init/migration from github/project-ql-dude
This commit initializes the `codeql-development-template` repository template in the `advanced-security` organization using contents copied from the now deprecated `github/project-ql-dude` source repository.
0 parents  commit d986190

File tree

211 files changed

+16268
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

211 files changed

+16268
-0
lines changed

‎.github/ISSUE_TEMPLATE/prompt-update.yml‎

Lines changed: 89 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,89 @@
1+
name: Update Instructions & Prompts
2+
description: Improve instructions, prompts, or templates for Copilot
3+
title: "[Prompt Update]: "
4+
labels: ["prompt-update", "enhancement"]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: |
9+
Thanks for improving the prompt system! This helps make Copilot Coding Agent more effective.
10+
11+
- type: dropdown
12+
id: scope
13+
attributes:
14+
label: Update Scope
15+
description: What area needs improvement?
16+
options:
17+
- Issue Templates
18+
- PR Templates
19+
- Copilot Instructions
20+
- Workflow Prompts
21+
- CLI Tool Prompts
22+
- Language-Specific Prompts
23+
- Documentation (README/PROMPTS)
24+
- Multiple areas
25+
default: 0
26+
validations:
27+
required: true
28+
29+
- type: textarea
30+
id: current-issue
31+
attributes:
32+
label: Current Issue
33+
description: What problem exists with current prompts/instructions?
34+
placeholder: "Currently, Copilot..."
35+
validations:
36+
required: true
37+
38+
- type: textarea
39+
id: proposed-improvement
40+
attributes:
41+
label: Proposed Improvement
42+
description: How should the prompts be improved?
43+
placeholder: "The prompts should instead..."
44+
validations:
45+
required: true
46+
47+
- type: textarea
48+
id: example-behavior
49+
attributes:
50+
label: Example Impact
51+
description: Show how this would improve Copilot's behavior
52+
placeholder: |
53+
Before: Copilot generates...
54+
After: Copilot should generate...
55+
validations:
56+
required: false
57+
58+
- type: dropdown
59+
id: hierarchy-level
60+
attributes:
61+
label: Prompt Hierarchy Level
62+
description: Which level is affected? (See PROMPTS.md)
63+
options:
64+
- Level 1 (Issue Templates)
65+
- Level 2 (Instructions)
66+
- Level 3 (Workflow Prompts)
67+
- Level 4 (CLI/Language Prompts)
68+
- Multiple levels
69+
- Not sure
70+
default: 5
71+
validations:
72+
required: false
73+
74+
- type: input
75+
id: references
76+
attributes:
77+
label: References (Optional)
78+
description: Links to related issues or discussions
79+
placeholder: "https://..."
80+
validations:
81+
required: false
82+
83+
- type: checkboxes
84+
id: terms
85+
attributes:
86+
label: Code of Conduct
87+
options:
88+
- label: I agree to follow this project's Code of Conduct
89+
required: true

‎.github/ISSUE_TEMPLATE/query-create.yml‎

Lines changed: 120 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,120 @@
1+
name: Request new CodeQL Query
2+
description: Request a new CodeQL query for detecting specific code patterns
3+
title: "[Query Create]: "
4+
labels: ["query-create", "enhancement"]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: |
9+
Thanks for requesting a new CodeQL query! This template helps Copilot Coding Agent understand your requirements.
10+
11+
- type: dropdown
12+
id: target-language
13+
attributes:
14+
label: Target Language
15+
description: Which programming language should this query target?
16+
options:
17+
- actions
18+
- cpp
19+
- csharp
20+
- go
21+
- java
22+
- javascript
23+
- python
24+
- ql
25+
- ruby
26+
default: 0
27+
validations:
28+
required: true
29+
30+
- type: input
31+
id: query-name
32+
attributes:
33+
label: Query Name (Optional)
34+
description: PascalCased name (e.g., DetectSqlInjection). Auto-generated if not provided.
35+
placeholder: "e.g., DetectSqlInjection, FindMemoryLeaks"
36+
validations:
37+
required: false
38+
39+
- type: dropdown
40+
id: query-type
41+
attributes:
42+
label: Query Type
43+
description: Category of this query
44+
options:
45+
- Security
46+
- Performance
47+
- Code Quality
48+
- Maintainability
49+
- Bug Detection
50+
- Framework-specific
51+
- Other
52+
default: 0
53+
validations:
54+
required: true
55+
56+
- type: textarea
57+
id: description
58+
attributes:
59+
label: Query Description
60+
description: What should this query detect?
61+
placeholder: "This query should identify..."
62+
validations:
63+
required: true
64+
65+
- type: dropdown
66+
id: severity
67+
attributes:
68+
label: Expected Severity
69+
description: Severity level for detected issues
70+
options:
71+
- Critical
72+
- High
73+
- Medium
74+
- Low
75+
- Informational
76+
default: 2
77+
validations:
78+
required: true
79+
80+
- type: textarea
81+
id: examples
82+
attributes:
83+
label: Code Examples
84+
description: Provide code that should (and shouldn't) be detected
85+
placeholder: |
86+
```java
87+
// SHOULD be detected:
88+
String sql = "SELECT * FROM users WHERE id=" + userId;
89+
90+
// should NOT be detected:
91+
PreparedStatement stmt = conn.prepareStatement("SELECT * FROM users WHERE id=?");
92+
```
93+
validations:
94+
required: false
95+
96+
- type: input
97+
id: cwe-reference
98+
attributes:
99+
label: CWE/CVE Reference (Optional)
100+
description: Related Common Weakness Enumeration or CVE
101+
placeholder: "e.g., CWE-89, CVE-2023-12345"
102+
validations:
103+
required: false
104+
105+
- type: input
106+
id: references
107+
attributes:
108+
label: References (Optional)
109+
description: Links to documentation, research, or related resources
110+
placeholder: "https://..."
111+
validations:
112+
required: false
113+
114+
- type: checkboxes
115+
id: terms
116+
attributes:
117+
label: Code of Conduct
118+
options:
119+
- label: I agree to follow this project's Code of Conduct
120+
required: true

‎.github/ISSUE_TEMPLATE/query-update.yml‎

Lines changed: 96 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,96 @@
1+
name: Update existing CodeQL Query
2+
description: Request improvements or fixes to an existing CodeQL query
3+
title: "[Query Update]: "
4+
labels: ["query-update", "enhancement"]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: |
9+
Thanks for requesting a query update! This template helps Copilot Coding Agent understand what needs to change.
10+
11+
- type: input
12+
id: query-file
13+
attributes:
14+
label: Query File Path
15+
description: Path to the query file to update
16+
placeholder: "e.g., languages/java/custom/src/SqlInjection/SqlInjection.ql"
17+
validations:
18+
required: true
19+
20+
- type: dropdown
21+
id: update-type
22+
attributes:
23+
label: Update Type
24+
description: What kind of update is needed?
25+
options:
26+
- Bug fix (false positives/negatives)
27+
- Performance improvement
28+
- Enhanced detection coverage
29+
- Framework/library support
30+
- Documentation update
31+
- Refactoring/cleanup
32+
default: 0
33+
validations:
34+
required: true
35+
36+
- type: textarea
37+
id: issue-description
38+
attributes:
39+
label: Issue Description
40+
description: What problem needs to be fixed?
41+
placeholder: "The query currently..."
42+
validations:
43+
required: true
44+
45+
- type: textarea
46+
id: proposed-solution
47+
attributes:
48+
label: Proposed Solution
49+
description: How should this be fixed?
50+
placeholder: "The query should instead..."
51+
validations:
52+
required: false
53+
54+
- type: textarea
55+
id: examples
56+
attributes:
57+
label: Code Examples
58+
description: Examples demonstrating the issue and expected behavior
59+
placeholder: |
60+
```java
61+
// Currently flagged (but shouldn't be):
62+
63+
// Not flagged (but should be):
64+
```
65+
validations:
66+
required: false
67+
68+
- type: dropdown
69+
id: breaking-change
70+
attributes:
71+
label: Breaking Change?
72+
description: Will this significantly change query results?
73+
options:
74+
- "No - backward compatible"
75+
- "Yes - breaking change"
76+
- "Unsure"
77+
default: 0
78+
validations:
79+
required: true
80+
81+
- type: input
82+
id: references
83+
attributes:
84+
label: References (Optional)
85+
description: Links to related issues, bug reports, or documentation
86+
placeholder: "https://..."
87+
validations:
88+
required: false
89+
90+
- type: checkboxes
91+
id: terms
92+
attributes:
93+
label: Code of Conduct
94+
options:
95+
- label: I agree to follow this project's Code of Conduct
96+
required: true

‎.github/PULL_REQUEST_TEMPLATE/prompt-update.md‎

Lines changed: 65 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
---
2+
name: 🎯 Update Instructions & Prompts
3+
about: Pull request for improving instructions, prompts, or templates
4+
title: '[UPDATE PROMPTS] '
5+
labels:
6+
- prompt-update
7+
- enhancement
8+
---
9+
10+
## 📝 Prompt Update
11+
12+
- **Scope**: <!-- Global, Language-Specific, CLI Tools, Templates -->
13+
- **Hierarchy Level**: <!-- Level 1-4, see PROMPTS.md -->
14+
- **Target Language** (if applicable): <!-- e.g., java, python -->
15+
16+
## 🎯 Changes
17+
18+
### What Changed
19+
20+
<!-- Description of prompt/instruction modifications -->
21+
22+
### Why This Change
23+
24+
<!-- Motivation for the update -->
25+
26+
### Issues Addressed
27+
28+
<!-- Specific Copilot behavior problems resolved -->
29+
30+
## 🔍 Impact
31+
32+
### Previous Behavior
33+
34+
<!-- How Copilot behaved with old prompts -->
35+
36+
### New Behavior
37+
38+
<!-- How Copilot should behave with updated prompts -->
39+
40+
## 🧪 Validation
41+
42+
- [ ] Manual testing completed
43+
- [ ] Workflow validation performed
44+
- [ ] No forbidden files included (no queries, tests, or analysis files)
45+
46+
### Test Scenarios
47+
48+
1. <!-- Describe test scenario and result -->
49+
2. <!-- Additional scenarios as needed -->
50+
51+
## 📋 Checklist
52+
53+
- [ ] Only prompt system files included
54+
- [ ] No query implementation files
55+
- [ ] No analysis or summary files
56+
- [ ] Documentation updated (PROMPTS.md/README.md if needed)
57+
- [ ] Links and references validated
58+
59+
## 🔗 References
60+
61+
<!-- Links to originating issue or related discussions -->
62+
63+
---
64+
65+
**Note**: This update maintains hierarchy integrity and follows prompt system best practices.

0 commit comments

Comments
 (0)