-
Notifications
You must be signed in to change notification settings - Fork 429
Add capability to filter queries #1098
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add capability to filter queries #1098
Conversation
This change adds a `query-filters` property to the codeql-config file. This property is an array of `exclude`/`include` entries for a query suite. These filters are appended to the generated query suite files and used to filter queries after they are selected. A related change is that now, all pack references are run in a single query suite, which has the query filters appended to them.
153ab19 to
b0c630e
Compare
b0c630e to
eec34d5
Compare
Removes duplicated yaml. Also add some better typings.
6772540 to
59ca9b5
Compare
henrymercer
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A few minor comments, but generally this looks good to me.
| @@ -0,0 +1,10 @@ | |||
| name: "CodeQL config 1" | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for naming the tests in the workflow file. We could potentially add those names here too.
| - include: | ||
| tags contain: external/cwe/cwe-022 | ||
|
|
||
| # Removes out js/path-injection |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| # Removes out js/path-injection | |
| # Removes js/path-injection |
| - include: | ||
| tags contain: external/cwe/cwe-022 | ||
|
|
||
| # Removes out js/path-injection |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| # Removes out js/path-injection | |
| # Removes js/path-injection |
| - include: | ||
| tags contain: external/cwe/cwe-022 | ||
|
|
||
| # Removes out js/path-injection |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| # Removes out js/path-injection | |
| # Removes js/path-injection |
Add capability to filter queries
|
I am reverting this feature and creating a new release without it since we don't want this feature in GHES 3.6. |
Revert "Add capability to filter queries #1098"
This reverts commit 99d4397.
This change adds a
query-filtersproperty to the codeql-config file.This property is an array of
exclude/includeentries for a querysuite. These filters are appended to the generated query suite files
and used to filter queries after they are selected.
A related change is that now, all pack references are run in a single
query suite, which has the query filters appended to them.
Merge / deployment checklist