diff --git a/ql/lib/semmle/go/frameworks/SQL.qll b/ql/lib/semmle/go/frameworks/SQL.qll index acf8be77d7f..66566f7540c 100644 --- a/ql/lib/semmle/go/frameworks/SQL.qll +++ b/ql/lib/semmle/go/frameworks/SQL.qll @@ -83,7 +83,11 @@ module SQL { SquirrelQueryString() { exists(Function fn | exists(string sq | - sq = package(["github.com/Masterminds", "github.com/lann"], "squirrel") + sq = + package([ + "github.com/Masterminds/squirrel", "gopkg.in/Masterminds/squirrel", + "github.com/lann/squirrel" + ], "") | // first argument to `squirrel.Expr` fn.hasQualifiedName(sq, "Expr")