diff options
Diffstat (limited to '')
| -rw-r--r-- | .github/codeql-custom.qls | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/.github/codeql-custom.qls b/.github/codeql-custom.qls new file mode 100644 index 0000000..d35fbe3 --- /dev/null +++ b/.github/codeql-custom.qls @@ -0,0 +1,44 @@ +--- +# vi: ts=2 sw=2 et syntax=yaml: +# SPDX-License-Identifier: LGPL-2.1-or-later +# +# Note: it is not recommended to directly reference the respective queries from +# the github/codeql repository, so we have to "dance" around it using +# a custom QL suite +# See: +# - https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#running-additional-queries +# - https://github.com/github/codeql-action/issues/430#issuecomment-806092120 +# - https://codeql.github.com/docs/codeql-cli/creating-codeql-query-suites/ + +# Note: the codeql/<lang>-queries pack name can be found in the CodeQL repo[0] +# in <lang>/ql/src/qlpack.yml. The respective codeql-suites are then +# under <lang>/ql/src/codeql-suites/. +# +# [0] https://github.com/github/codeql +- import: codeql-suites/cpp-lgtm.qls + from: codeql/cpp-queries +- import: codeql-suites/python-lgtm.qls + from: codeql/python-queries +- include: + id: + - cpp/bad-strncpy-size + - cpp/declaration-hides-variable + - cpp/include-non-header + - cpp/inconsistent-null-check + - cpp/mistyped-function-arguments + - cpp/nested-loops-with-same-variable + - cpp/sizeof-side-effect + - cpp/suspicious-pointer-scaling + - cpp/suspicious-pointer-scaling-void + - cpp/suspicious-sizeof + - cpp/unsafe-strcat + - cpp/unsafe-strncat + - cpp/unsigned-difference-expression-compared-zero + - cpp/unused-local-variable + tags: + - "security" + - "correctness" + severity: "error" +- exclude: + id: + - cpp/fixme-comment |