Commit Graph

1596 Commits

Author SHA1 Message Date
William Ballenthin
9a4e9b6586 setup: add initial mypy setup
invoke like: mypy --config-file .github/mypy/mypy.ini capa/main.py
2021-06-09 14:50:37 -06:00
Capa Bot
23354ec452 Sync capa rules submodule 2021-06-09 09:19:50 +00:00
Capa Bot
f698f4e79b Sync capa rules submodule 2021-06-09 08:08:12 +00:00
Moritz
c05a8bf910 Merge pull request #620 from fireeye/fix-619
correctly render negative numbers and offsets
2021-06-09 10:03:04 +02:00
Moritz
9ffbb82f4c Merge pull request #618 from fireeye/fix/616
fix 616
2021-06-09 10:00:04 +02:00
William Ballenthin
0508d31a35 changelog 2021-06-08 11:10:40 -06:00
William Ballenthin
901a398b31 insn: render negative number, offset correctly
closes #619
2021-06-08 11:09:32 -06:00
mike-hunhoff
fd0f87ca6e Update capa/features/file.py w/ PR changes
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2021-06-08 10:59:42 -06:00
Michael Hunhoff
84d2f9f324 fix 616 2021-06-08 10:16:54 -06:00
Capa Bot
f9bad7e5e4 Sync capa rules submodule 2021-06-08 14:17:39 +00:00
Capa Bot
40b6575db6 Sync capa-testfiles submodule 2021-06-08 12:48:33 +00:00
Willi Ballenthin
64d849aafc Merge pull request #613 from fireeye/doc/update-readme
update readme
2021-06-07 10:46:28 -06:00
Willi Ballenthin
3b6e6dcc00 Merge pull request #612 from fireeye/ci/no-changelog-dependabot
ignore dependabot for changelog check
2021-06-07 10:45:56 -06:00
Willi Ballenthin
d17ac2928f Merge pull request #615 from fireeye/bump-smda
bump smda and remove xfail
2021-06-07 10:33:21 -06:00
Moritz Raabe
8b58723f40 bump smda and remove xfail 2021-06-07 13:56:55 +02:00
Moritz Raabe
bed2e3777e job level exclusion 2021-06-07 12:38:03 +02:00
Capa Bot
c039e98d3f Sync capa rules submodule 2021-06-07 09:51:13 +00:00
Moritz Raabe
c3ba6a9025 update readme 2021-06-07 10:26:41 +02:00
Moritz
2691fb400e Merge pull request #611 from fireeye/dependabot/pip/pytest-cov-2.12.1
build(deps-dev): bump pytest-cov from 2.12.0 to 2.12.1
2021-06-07 09:55:12 +02:00
Moritz
e0075573d9 Merge pull request #610 from fireeye/dependabot/pip/ruamel-yaml-0.17.7
build(deps): bump ruamel-yaml from 0.17.5 to 0.17.7
2021-06-07 09:55:00 +02:00
Moritz
1bb8c78b60 Merge pull request #609 from fireeye/dependabot/pip/black-21.5b2
build(deps-dev): bump black from 21.5b1 to 21.5b2
2021-06-07 09:54:40 +02:00
Moritz Raabe
ff66346d2a ignore dependabot for changelog check 2021-06-07 09:52:46 +02:00
Capa Bot
6f51324cca Sync capa-testfiles submodule 2021-06-07 07:45:31 +00:00
Capa Bot
700259eab6 Sync capa rules submodule 2021-06-07 07:45:04 +00:00
Capa Bot
438677b129 Sync capa-testfiles submodule 2021-06-07 06:48:11 +00:00
Capa Bot
3f51e787e4 Sync capa rules submodule 2021-06-07 06:19:37 +00:00
Capa Bot
2bbf00d603 Sync capa rules submodule 2021-06-07 06:17:47 +00:00
Moritz
b21b041dab Merge pull request #608 from fireeye/fix-605
fix 605
2021-06-07 08:16:16 +02:00
Moritz
734b1702e6 Merge pull request #607 from Ana06/ahead-changed-files
Use Ana06/get-changed-files@v1.2
2021-06-07 08:11:27 +02:00
dependabot[bot]
a39e2e7e0f build(deps-dev): bump pytest-cov from 2.12.0 to 2.12.1
Bumps [pytest-cov](https://github.com/pytest-dev/pytest-cov) from 2.12.0 to 2.12.1.
- [Release notes](https://github.com/pytest-dev/pytest-cov/releases)
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-cov/compare/v2.12.0...v2.12.1)

---
updated-dependencies:
- dependency-name: pytest-cov
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-07 06:02:46 +00:00
dependabot[bot]
d9e1732766 build(deps): bump ruamel-yaml from 0.17.5 to 0.17.7
Bumps [ruamel-yaml](https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree) from 0.17.5 to 0.17.7.

---
updated-dependencies:
- dependency-name: ruamel-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-07 06:02:38 +00:00
dependabot[bot]
6dd5bbeffd build(deps-dev): bump black from 21.5b1 to 21.5b2
Bumps [black](https://github.com/psf/black) from 21.5b1 to 21.5b2.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/commits)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-07 06:02:31 +00:00
William Ballenthin
3c4388e280 changelog 2021-06-04 11:48:03 -06:00
Ana Maria Martinez Gomez
6ffa5ef53e changelog: fix number of new rules
This was caused by a bug in the GH action which updates this number
automatically:
https://github.com/fireeye/capa-rules/pull/405
2021-06-04 19:47:57 +02:00
William Ballenthin
90ec848bf6 main: fix matching BB features at file scope
closes #605
2021-06-04 11:45:37 -06:00
William Ballenthin
e0be7f1b8e main: debug rules more correctly 2021-06-04 11:31:19 -06:00
Ana Maria Martinez Gomez
4ef3830b6b Use Ana06/get-changed-files@v1.2
Use Ana06/get-changed-files@v1.2 which removes the _head commit is ahead
of the base commit_ check. This made the action failed in not up-to-date
branches (in which rebasing is needed).

It supersedes https://github.com/fireeye/capa/pull/599
2021-06-04 14:03:41 +02:00
Ana María Martínez Gómez
e737595339 Merge pull request #604 from Ana06/lint_changelog
ci: lint CHANGELOG
2021-06-04 13:33:11 +02:00
Capa Bot
94cb090afe Sync capa rules submodule 2021-06-04 09:10:09 +00:00
Moritz
32e0a5dce2 Merge pull request #598 from fireeye/render/json-attck-fields
parse att&ck for output doc
2021-06-02 16:54:31 +02:00
Ana Maria Martinez Gomez
f304bdbd20 ci: lint CHANGELOG
The sync GH action in capa-rules relies on a single '- *$' in the
CHANGELOG file. Check in the tests that this is the case to avoid that
it is removed.

This happened in the following PR:
https://github.com/fireeye/capa/pull/591
This caused that the new rules in the following PR were not added to the
CHANGELOG:
https://github.com/fireeye/capa-rules/pull/400
2021-06-02 12:42:48 +02:00
Ana Maria Martinez Gomez
1a3286beda ci: fix CHANGELOG
The `-` used by the GitHub actions which updates the rules in the
CHANGELOG was removed in:
https://github.com/fireeye/capa/pull/591
Consequently the new rules added in the last pull request were not added
to the CHANGELOG:
https://github.com/fireeye/capa-rules/pull/400
2021-06-02 12:12:48 +02:00
Moritz Raabe
63cd70029f dedup code 2021-06-02 11:06:49 +02:00
Moritz Raabe
94089ff43f parse att&ck for output doc 2021-06-02 10:37:19 +02:00
Capa Bot
8f1ce68e96 Sync capa rules submodule 2021-06-01 17:51:43 +00:00
Willi Ballenthin
37208aabd3 Merge pull request #591 from fireeye/feature-590
main: use rule scope internal/limitation/file for file limitations, not code
2021-06-01 11:50:56 -06:00
Willi Ballenthin
8c3605c886 Merge branch 'master' into feature-590 2021-06-01 11:50:40 -06:00
William Ballenthin
2706a7171e linter: fix match namespace handling
closes #601
2021-06-01 11:38:05 -06:00
William Ballenthin
8f3d443247 rules: use existing code, dedup 2021-06-01 11:25:38 -06:00
Willi Ballenthin
9968d16f21 Merge pull request #593 from fireeye/feature-159
json: capture all strings matching regex
2021-06-01 11:18:08 -06:00