Downgrade query severity to warning

This commit is contained in:
Henry Mercer 2023-05-16 11:06:13 +01:00
parent 8065746a2a
commit eac5e24aee
2 changed files with 2 additions and 12 deletions

View file

@ -2,7 +2,7 @@
* @name Some environment variables may not exist in default setup workflows
* @id javascript/codeql-action/default-setup-env-vars
* @kind problem
* @severity error
* @severity warning
*/
import javascript

View file

@ -2,7 +2,7 @@
* @name Some context properties may not exist in default setup workflows
* @id javascript/codeql-action/default-setup-context-properties
* @kind path-problem
* @severity error
* @severity warning
*/
import javascript
@ -49,16 +49,6 @@ class EventContextAccessConfiguration extends DataFlow::Configuration {
}
}
predicate deepPropertyRead(DataFlow::PropRead originalRead, DataFlow::PropRead read, int depth) {
read = originalRead and depth = 1
or
exists(DataFlow::PropRead prevRead, int prevDepth |
deepPropertyRead(originalRead, prevRead, prevDepth) and
read = prevRead.getAPropertyRead() and
depth = prevDepth + 1
)
}
from EventContextAccessConfiguration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
where
cfg.hasFlowPath(source, sink) and