Skip to content

Add Synthetic CodeQL configuration file #46

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Feb 21, 2024
Merged

Conversation

felickz
Copy link
Contributor

@felickz felickz commented Feb 20, 2024

This pull request introduces a new configuration file named codeql-synthetics.yml in the configs directory. The configuration is designed for the broadest coverage of security results from various sources such as the CodeQL Built-in packs and the GitHub Security Lab Community packs. The file includes a warning about potential false positives and notes that it does not include audit-level queries or debugging queries.

ReadMe.md

  • Enhanced descriptions of each config + use cases

@felickz felickz marked this pull request as ready for review February 20, 2024 16:59
@felickz felickz requested a review from GeekMasher February 20, 2024 16:59
@GeekMasher GeekMasher requested a review from pwntester February 21, 2024 08:30
Copy link
Contributor

@GeekMasher GeekMasher left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

Comment on lines +50 to +51
- trailofbits/cpp-queries
- trailofbits/go-queries

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice! Do you know of other companies or customers publishing QLPacks that we could reference here?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not that I'm aware of

@GeekMasher GeekMasher merged commit 1c49cfc into main Feb 21, 2024
@GeekMasher GeekMasher deleted the config-synthetics branch February 21, 2024 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants