Downgrade query severity to warning
This commit is contained in:
parent
8065746a2a
commit
eac5e24aee
2 changed files with 2 additions and 12 deletions
|
|
@ -2,7 +2,7 @@
|
|||
* @name Some environment variables may not exist in default setup workflows
|
||||
* @id javascript/codeql-action/default-setup-env-vars
|
||||
* @kind problem
|
||||
* @severity error
|
||||
* @severity warning
|
||||
*/
|
||||
|
||||
import javascript
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
* @name Some context properties may not exist in default setup workflows
|
||||
* @id javascript/codeql-action/default-setup-context-properties
|
||||
* @kind path-problem
|
||||
* @severity error
|
||||
* @severity warning
|
||||
*/
|
||||
|
||||
import javascript
|
||||
|
|
@ -49,16 +49,6 @@ class EventContextAccessConfiguration extends DataFlow::Configuration {
|
|||
}
|
||||
}
|
||||
|
||||
predicate deepPropertyRead(DataFlow::PropRead originalRead, DataFlow::PropRead read, int depth) {
|
||||
read = originalRead and depth = 1
|
||||
or
|
||||
exists(DataFlow::PropRead prevRead, int prevDepth |
|
||||
deepPropertyRead(originalRead, prevRead, prevDepth) and
|
||||
read = prevRead.getAPropertyRead() and
|
||||
depth = prevDepth + 1
|
||||
)
|
||||
}
|
||||
|
||||
from EventContextAccessConfiguration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
|
||||
where
|
||||
cfg.hasFlowPath(source, sink) and
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue