Merge pull request #1 from advanced-security/unit_tests

Restructured to have unit tests working

Author: jeongsoolee09

.github/codeql/extensions/codeql-pack.yml renamed to .github/codeql/extensions/qlpack.yml

@@ -1,9 +1,9 @@
 ---
 library: true
-name: sap-js/ui5-data-extension-pack
+name: sap-js/ui5-data-extensions-pack
 version: 0.0.1
 extensionTargets:
   codeql/javascript-all: "*"
   codeql/javascript-queries: "*"
 dataExtensions:
-  - ui5-data-extension.yaml
+  - ui5-data-extensions.yml

.github/codeql/extensions/ui5-data-extension.yaml renamed to .github/codeql/extensions/ui5-data-extensions.yml

@@ -16,13 +16,17 @@ extensions:
       pack: codeql/javascript-all
       extensible: sourceModel
     data:
-      # sap.ui.commons.TextField.value
+      # sap.ui.commons.TextField.value sap.ui.commons.TextField#getValue
       - ["sap/ui/commons/TextField", "Instance.Member[value]", "remote"]
-      # sap.m.InputBase.value
+      - ["sap/ui/commons/TextField", "Instance.Member[getValue].ReturnValue", "remote"]
+      # sap.m.InputBase.value sap.m.InputBase#getValue
       - ["sap/m/InputBase", "Instance.Member[value]", "remote"]
-      # sap.m.Input.value
+      - ["sap/m/InputBase", "Instance.Member[getValue]", "remote"]
+      # sap.m.SearchField.value sap.m.InputBase#getValue
+      - ["sap/m/SearchField", "Instance.Member[value]", "remote"]
+      - ["sap/m/SearchField", "Instance.Member[getValue]", "remote"]
+      # sap.m.Input.value sap.m.Input#getValue()
       - ["sap/m/Input", "Instance.Member[value]", "remote"]
-      #  sap.m.Input#getValue()
       - ["sap/m/Input", "Instance.Member[getValue].ReturnValue", "remote"]
       # jQuery.sap.getUriParameters() return
       - ["global", "Member[jQuery].Member[sap].Member[getUriParameters].ReturnValue.Member[get]", "remote"]
@@ -36,8 +40,7 @@ extensions:
       - ["global", "Member[jQuery].Member[sap].Member[syncPost].ReturnValue", "remote"]
       # jQuery.sap.syncPostText() return
       - ["global", "Member[jQuery].Member[sap].Member[syncPostText].ReturnValue", "remote"]
-      # UriParameters#get
-      # UriParameters#getAll
+      # UriParameters#get UriParameters#getAll
       - ["sap/base/util/UriParameters", "Member[fromQuery].ReturnValue.Member[get].ReturnValue", "remote"]
       - ["sap/base/util/UriParameters", "Member[fromQuery].ReturnValue.Member[getAll].ReturnValue", "remote"]
   - addsTo:

.github/workflows/codeql.yml

@@ -0,0 +1,34 @@
+name: "CodeQL Queries"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "main" ]
+  schedule:
+    - cron: '39 12 * * 2'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: 'ubuntu-latest'
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v3
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: javascript
+        # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        queries: security-extended,./src
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2

.github/workflows/codeql_queries.yml

@@ -1,3 +1,2 @@
 provide:
   - "**/qlpack.yml"
-  - "**/codeql-workspace.yml"