honeymoose/org.hl7.fhir.core
1
0
Fork 0
mirror of https://github.com/hapifhir/org.hl7.fhir.core.git synced 2025-02-09 06:14:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Temporarily disable CodeQL ReDoS and overly-large-range (#1344)

Browse Source 
* Nudge to allow branch push

* Add codeql config

* Move codeql config around

* Move config file into init step

* Shuffle config-file index

* Change to correct query id

* Shuffle and switch to polynomial-redos

* Ignore both redos queries

* Ignore java/overly-large-range

* Add comment on exclude
This commit is contained in:
dotasek 2023-07-11 13:42:54 -04:00 committed by GitHub
parent c2e4b2090f
commit ca2b26fc3b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
.codeql-config.yml Normal file
View File

@ -0,0 +1,10 @@
name: "Code scanning CodeQL config"
query-filters:
# This should be empty, but contains three queries that currently break the CodeQL action - dotasek
- exclude:
id: java/polynomial-redos
- exclude:
id: java/redos
- exclude:
id: java/overly-large-range

1
.github/workflows/codeql.yml vendored
View File

@ -45,6 +45,7 @@ jobs:
uses: github/codeql-action/init@v2 uses: github/codeql-action/init@v2
with: with:
languages: ${{ matrix.language }} languages: ${{ matrix.language }}
config-file: ./.codeql-config.yml
# If you wish to specify custom queries, you can do so here or in a config file. # If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file. # By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file. # Prefix the list here with "+" to use these queries and those in the config file.

2
RELEASE_NOTES.md
View File

@ -1,6 +1,6 @@
## Validator Changes ## Validator Changes
* no changes * no changes
## Other code changes ## Other code changes