Skip to content

Conversation

@felickz
Copy link
Contributor

@felickz felickz commented Feb 20, 2024

This pull request introduces a new configuration file named codeql-synthetics.yml in the configs directory. The configuration is designed for the broadest coverage of security results from various sources such as the CodeQL Built-in packs and the GitHub Security Lab Community packs. The file includes a warning about potential false positives and notes that it does not include audit-level queries or debugging queries.

ReadMe.md

  • Enhanced descriptions of each config + use cases

@felickz felickz marked this pull request as ready for review February 20, 2024 16:59
@felickz felickz requested a review from GeekMasher February 20, 2024 16:59
@GeekMasher GeekMasher requested a review from pwntester February 21, 2024 08:30
Copy link
Contributor

@GeekMasher GeekMasher left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

Comment on lines +50 to +51
- trailofbits/cpp-queries
- trailofbits/go-queries

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice! Do you know of other companies or customers publishing QLPacks that we could reference here?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not that I'm aware of

@GeekMasher GeekMasher merged commit 1c49cfc into main Feb 21, 2024
@GeekMasher GeekMasher deleted the config-synthetics branch February 21, 2024 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants