Skip to content

Exclude dependency-based query from C# Code Scanning#3736

Merged
jbj merged 1 commit into
github:masterfrom
rneatherway:exclude-cs-vulnerable-package
Jun 22, 2020
Merged

Exclude dependency-based query from C# Code Scanning#3736
jbj merged 1 commit into
github:masterfrom
rneatherway:exclude-cs-vulnerable-package

Conversation

@rneatherway
Copy link
Copy Markdown
Contributor

This query overlaps with tools such as dependabot.

This query overlaps with tools such as dependabot.
@rneatherway rneatherway requested review from a team as code owners June 18, 2020 10:29
@rneatherway
Copy link
Copy Markdown
Contributor Author

@robertbrignull I noticed there was a typo in one of the cpp suites, which I've also corrected here. How would you recommend testing these changes?

@robertbrignull
Copy link
Copy Markdown
Contributor

One way you could test this change is to checkout this commit locally and run codeql resolve queries cpp-security-extended.qls and it should work but then fail if you reintroduce the typo.

Copy link
Copy Markdown
Contributor

@calumgrant calumgrant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've not familiar with the syntax, but the overall idea seems good to me.

Copy link
Copy Markdown
Contributor

@jbj jbj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

C/C++ LGTM.

- apply: security-extended-selectors.yml
from: codeql-suite-helpers
- apply: codeql-suites/excluded-slow-queries.yml
- apply: codeql-suites/exclude-slow-queries.yml
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This has been fixed already on master, but repeating the fix shouldn't hurt.

@rneatherway
Copy link
Copy Markdown
Contributor Author

Please go ahead and merge if you're happy, I don't have write access here.

@jbj jbj merged commit 3913751 into github:master Jun 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants