robojerk/codeql-action

Downgrade query severity to warning

Browse source
This commit is contained in:
Henry Mercer 2023-05-16 11:06:13 +01:00
parent 8065746a2a
commit eac5e24aee
2 changed files with 2 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

2
queries/default-setup-environment-variables.ql
View file

@ -2,7 +2,7 @@
* @name Some environment variables may not exist in default setup workflows * @name Some environment variables may not exist in default setup workflows
* @id javascript/codeql-action/default-setup-env-vars * @id javascript/codeql-action/default-setup-env-vars
* @kind problem * @kind problem
* @severity error * @severity warning
*/ */
import javascript import javascript

12
queries/default-setup-event-context.ql
View file

@ -2,7 +2,7 @@
* @name Some context properties may not exist in default setup workflows * @name Some context properties may not exist in default setup workflows
* @id javascript/codeql-action/default-setup-context-properties * @id javascript/codeql-action/default-setup-context-properties
* @kind path-problem * @kind path-problem
* @severity error * @severity warning
*/ */
import javascript import javascript
@ -49,16 +49,6 @@ class EventContextAccessConfiguration extends DataFlow::Configuration {
} }
} }
predicate deepPropertyRead(DataFlow::PropRead originalRead, DataFlow::PropRead read, int depth) {
read = originalRead and depth = 1
or
exists(DataFlow::PropRead prevRead, int prevDepth |
deepPropertyRead(originalRead, prevRead, prevDepth) and
read = prevRead.getAPropertyRead() and
depth = prevDepth + 1
)
}
from EventContextAccessConfiguration cfg, DataFlow::PathNode source, DataFlow::PathNode sink from EventContextAccessConfiguration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
where where
cfg.hasFlowPath(source, sink) and cfg.hasFlowPath(source, sink) and