diff --git a/queries/default-setup-environment-variables.ql b/queries/default-setup-environment-variables.ql index 750f390d1c..6a21158130 100644 --- a/queries/default-setup-environment-variables.ql +++ b/queries/default-setup-environment-variables.ql @@ -43,6 +43,7 @@ predicate envVarRead(DataFlow::Node node, string envVar) { from DataFlow::Node read, string envVar where envVarRead(read, envVar) and + not read.getFile().getBaseName().matches("%.test.ts") and not isSafeForDefaultSetup(envVar) select read, "The environment variable " + envVar +