Merge pull request #23060 from github/nickrolfe/json-data-extensions-shared

Shared: convert data extensions to JSON

Author: nickrolfe

shared/threat-models/ext/supported-threat-models.model.json

@@ -0,0 +1,13 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/threat-models",
+        "extensible": "threatModelConfiguration"
+      },
+      "data": [
+        ["default", true, -2147483648] // The "default" threat model is included by default
+      ]
+    }
+  ]
+}

shared/threat-models/ext/supported-threat-models.model.yml

@@ -0,0 +1,41 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/threat-models",
+        "extensible": "threatModelGrouping"
+      },
+      "data": [
+        // Default threat model
+        ["remote", "default"],
+
+        // Remote threat models
+        ["request", "remote"],
+        ["response", "remote"],
+
+        // Local threat models
+        ["database", "local"],
+        ["commandargs", "local"],
+        ["environment", "local"],
+        ["stdin", "local"],
+        ["file", "local"],
+        ["windows-registry", "local"],
+
+        // Android threat models
+        ["android-external-storage-dir", "android"],
+        ["contentprovider", "android"],
+
+        // Threat models that are not grouped with any other threat models.
+        // (Note that all threat models are a child of "all" implicitly, and we
+        // make it explicit here just to make sure all threat models are listed.)
+        ["database-access-result", "all"],
+        ["file-write", "all"],
+        ["reverse-dns", "all"],
+        ["view-component-input", "all"],
+
+        // AI threat models
+        ["ai", "all"]
+      ]
+    }
+  ]
+}

shared/threat-models/ext/threat-model-grouping.model.json

@@ -4,4 +4,5 @@ library: true
 groups: shared
 dataExtensions:
   - ext/*.model.yml
+  - ext/*.model.json
 warnOnImplicitThis: true

shared/threat-models/ext/threat-model-grouping.model.yml

@@ -0,0 +1,20 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/util",
+        "extensible": "restrictAlertsTo"
+      },
+      // Empty predicate means no restrictions on alert locations
+      "data": []
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/util",
+        "extensible": "restrictAlertsToExactLocation"
+      },
+      // Empty predicate means no restrictions on alert locations
+      "data": []
+    }
+  ]
+}

shared/threat-models/qlpack.yml

@@ -5,4 +5,5 @@ library: true
 dependencies: null
 dataExtensions:
   - ext/*.yml
+  - ext/*.json
 warnOnImplicitThis: true