Skip to content

Conversation

@felickz
Copy link
Contributor

@felickz felickz commented Jul 23, 2024

This is currently the best reference that aggregates this list of installed/vendored dependency folders that cause CodeQL to report vulns in 3rd party code.

Ex /deps: https://github.com/nodejs/node/tree/main/deps

Ruby test frameworks added:

# Ruby
- "**/gems/**"
- "**/spec/**/*_spec.rb"
- "**/test/**/*_test.rb"

pwntester
pwntester previously approved these changes Aug 1, 2024
@felickz
Copy link
Contributor Author

felickz commented Aug 19, 2024

FYI i am unable to merge this even after approved

Merging is blocked
You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.

@GeekMasher GeekMasher merged commit 7e5b552 into main Aug 20, 2024
@GeekMasher GeekMasher deleted the common-3rd-party-paths branch August 20, 2024 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants