mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
Merge pull request #12557 from felickz/patch-1
add security-severity score to code scanning query list
This commit is contained in:
@@ -8,7 +8,7 @@ import argparse
|
||||
|
||||
"""
|
||||
This script collects CodeQL queries that are part of code scanning query packs
|
||||
and prints CSV data to stdout that describes which packs contain which queries.
|
||||
and prints CSV data to stdout that describes which suites in the pack contain which queries.
|
||||
|
||||
Errors are printed to stderr. This script requires that 'git' and 'codeql' commands
|
||||
are on the PATH. It'll try to automatically set the CodeQL search path correctly,
|
||||
@@ -159,7 +159,7 @@ with CodeQL() as codeql:
|
||||
csvwriter = csv.writer(sys.stdout)
|
||||
csvwriter.writerow([
|
||||
"Query filename", "Suite", "Query name", "Query ID",
|
||||
"Kind", "Severity", "Precision", "Tags"
|
||||
"Kind", "Severity", "Precision", "Tags", "Security score"
|
||||
])
|
||||
|
||||
# Iterate over all languages and packs, and resolve which queries are part of those packs
|
||||
@@ -198,5 +198,6 @@ with CodeQL() as codeql:
|
||||
get_query_metadata('kind', meta, queryfile_nwo),
|
||||
get_query_metadata('problem.severity', meta, queryfile_nwo),
|
||||
get_query_metadata('precision', meta, queryfile_nwo),
|
||||
get_query_metadata('tags', meta, queryfile_nwo)
|
||||
get_query_metadata('tags', meta, queryfile_nwo),
|
||||
get_query_metadata('security-severity', meta, queryfile_nwo),
|
||||
])
|
||||
|
||||
Reference in New Issue
Block a user