Set provenance of models from otherApiCallableCredentialParam to manual and remove extra models

2025-12-22 03:36:30 +01:00 · 2023-10-13 15:40:44 -04:00
parent 2a91743477
commit 58dae6d1c6
14 changed files with 60 additions and 73 deletions
--- a/java/ql/lib/ext/ch.ethz.ssh2.model.yml
+++ b/java/ql/lib/ext/ch.ethz.ssh2.model.yml
@@ -3,5 +3,5 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
+      - ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
--- a/java/ql/lib/ext/com.amazonaws.auth.model.yml
+++ b/java/ql/lib/ext/com.amazonaws.auth.model.yml
@@ -3,5 +3,5 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String,String)", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String,String)", "", "Argument[1]", "credentials-key", "hq-generated"]
+      - ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String,String)", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String,String)", "", "Argument[1]", "credentials-key", "manual"]
--- a/java/ql/lib/ext/com.auth0.jwt.algorithms.model.yml
+++ b/java/ql/lib/ext/com.auth0.jwt.algorithms.model.yml
@@ -3,9 +3,9 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(String)", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(byte[])", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(String)", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(byte[])", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(String)", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(byte[])", "", "Argument[0]", "credentials-key", "hq-generated"]
+      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(String)", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(byte[])", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(String)", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(byte[])", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(String)", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(byte[])", "", "Argument[0]", "credentials-key", "manual"]
--- a/java/ql/lib/ext/com.azure.identity.model.yml
+++ b/java/ql/lib/ext/com.azure.identity.model.yml
@@ -3,6 +3,6 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.azure.identity", "ClientSecretCredentialBuilder", False, "clientSecret", "(String)", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "password", "(String)", "", "Argument[0]", "credentials-password", "hq-generated"]
-      - ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "username", "(String)", "", "Argument[0]", "credentials-username", "hq-generated"]
+      - ["com.azure.identity", "ClientSecretCredentialBuilder", False, "clientSecret", "(String)", "", "Argument[0]", "credentials-key", "manual"]
+      - ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "password", "(String)", "", "Argument[0]", "credentials-password", "manual"]
+      - ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "username", "(String)", "", "Argument[0]", "credentials-username", "manual"]
--- a/java/ql/lib/ext/com.jcraft.jsch.model.yml
+++ b/java/ql/lib/ext/com.jcraft.jsch.model.yml
@@ -4,10 +4,10 @@ extensions:
      extensible: sinkModel
    data:
      - ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String,int)", "", "Argument[1]", "request-forgery", "ai-manual"]
-      - ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String,int)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.jcraft.jsch", "Session", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "hq-generated"]
-      - ["com.jcraft.jsch", "Session", False, "setPassword", "(byte[])", "", "Argument[0]", "credentials-password", "hq-generated"]
+      - ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String,int)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.jcraft.jsch", "Session", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
+      - ["com.jcraft.jsch", "Session", False, "setPassword", "(byte[])", "", "Argument[0]", "credentials-password", "manual"]
  - addsTo:
      pack: codeql/java-all
      extensible: summaryModel
--- a/java/ql/lib/ext/com.microsoft.sqlserver.jdbc.model.yml
+++ b/java/ql/lib/ext/com.microsoft.sqlserver.jdbc.model.yml
@@ -3,7 +3,7 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "hq-generated"]
-      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setUser", "(String)", "", "Argument[0]", "credentials-username", "hq-generated"]
+      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
+      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
+      - ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setUser", "(String)", "", "Argument[0]", "credentials-username", "manual"]
--- a/java/ql/lib/ext/com.mongodb.model.yml
+++ b/java/ql/lib/ext/com.mongodb.model.yml
@@ -3,13 +3,13 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[2]", "credentials-password", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createGSSAPICredential", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[2]", "credentials-password", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createMongoX509Credential", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[2]", "credentials-password", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[2]", "credentials-password", "hq-generated"]
+      - ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[2]", "credentials-password", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createGSSAPICredential", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[2]", "credentials-password", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createMongoX509Credential", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[2]", "credentials-password", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[2]", "credentials-password", "manual"]
--- a/java/ql/lib/ext/com.sshtools.j2ssh.authentication.model.yml
+++ b/java/ql/lib/ext/com.sshtools.j2ssh.authentication.model.yml
@@ -3,6 +3,6 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "hq-generated"]
-      - ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", True, "setUsername", "(String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.sshtools.j2ssh.authentication", "SshAuthenticationClient", True, "setUsername", "(String)", "", "Argument[0]", "credentials-username", "hq-generated"]
+      - ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
+      - ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", True, "setUsername", "(String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.sshtools.j2ssh.authentication", "SshAuthenticationClient", True, "setUsername", "(String)", "", "Argument[0]", "credentials-username", "manual"]
--- a/java/ql/lib/ext/com.trilead.ssh2.model.yml
+++ b/java/ql/lib/ext/com.trilead.ssh2.model.yml
@@ -3,17 +3,16 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[1]", "credentials-key", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[2]", "credentials-password", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithNone", "(String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[1]", "credentials-key", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,File,String)", "", "Argument[1]", "credentials-key", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[2]", "credentials-password", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,File,String)", "", "Argument[2]", "credentials-password", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "getRemainingAuthMethods", "(String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["com.trilead.ssh2", "Connection", False, "isAuthMethodAvailable", "(String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[1]", "credentials-key", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithNone", "(String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[1]", "credentials-key", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[2]", "credentials-password", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,File,String)", "", "Argument[2]", "credentials-password", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "getRemainingAuthMethods", "(String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["com.trilead.ssh2", "Connection", False, "isAuthMethodAvailable", "(String,String)", "", "Argument[0]", "credentials-username", "manual"]
--- a/java/ql/lib/ext/net.schmizz.sshj.model.yml
+++ b/java/ql/lib/ext/net.schmizz.sshj.model.yml
@@ -3,10 +3,6 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["net.schmizz.sshj", "SSHClient", False, "auth", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["net.schmizz.sshj", "SSHClient", False, "authPassword", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,char[])", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["net.schmizz.sshj", "SSHClient", False, "authPublicKey", "", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["net.schmizz.sshj", "SSHClient", False, "loadKeys", "(String,char[])", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["net.schmizz.sshj", "SSHClient", False, "loadKeys", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
+      - ["net.schmizz.sshj", "SSHClient", False, "authPassword", "", "", "Argument[0]", "credentials-username", "manual"]
+      - ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
+      - ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
--- a/java/ql/lib/ext/org.apache.commons.net.ftp.model.yml
+++ b/java/ql/lib/ext/org.apache.commons.net.ftp.model.yml
@@ -3,7 +3,7 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
-      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[1]", "credentials-password", "hq-generated"]
+      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
+      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[1]", "credentials-password", "manual"]
--- a/java/ql/lib/ext/org.apache.shiro.mgt.model.yml
+++ b/java/ql/lib/ext/org.apache.shiro.mgt.model.yml
@@ -3,4 +3,4 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["org.apache.shiro.mgt", "AbstractRememberMeManager", True, "setCipherKey", "(byte[])", "", "Argument[0]", "credentials-key", "hq-generated"]
+      - ["org.apache.shiro.mgt", "AbstractRememberMeManager", True, "setCipherKey", "(byte[])", "", "Argument[0]", "credentials-key", "manual"]
--- a/java/ql/lib/ext/org.apache.sshd.client.session.model.yml
+++ b/java/ql/lib/ext/org.apache.sshd.client.session.model.yml
@@ -3,14 +3,6 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["org.apache.sshd.client.session", "AbstractClientSession", True, "addPasswordIdentity", "(String)", "", "Argument[0]", "credentials-password", "hq-generated"]
-      - ["org.apache.sshd.client.session", "AbstractClientSession", True, "addPublicKeyIdentity", "", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["org.apache.sshd.client.session", "AbstractClientSession", True, "setServerKey", "", "", "Argument[0]", "credentials-key", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,SocketAddress)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,SocketAddress,AttributeRepository)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,SocketAddress,SocketAddress)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,SocketAddress,AttributeRepository,SocketAddress)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,String,int)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,String,int,AttributeRepository)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,String,int,SocketAddress)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,String,int,AttributeRepository,SocketAddress)", "", "Argument[0]", "credentials-username", "hq-generated"]
+      - ["org.apache.sshd.client.session", "AbstractClientSession", True, "addPasswordIdentity", "(String)", "", "Argument[0]", "credentials-password", "manual"]
+      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,SocketAddress)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,String,int)", "", "Argument[0]", "credentials-username", "manual"]
--- a/java/ql/lib/ext/org.springframework.security.core.userdetails.model.yml
+++ b/java/ql/lib/ext/org.springframework.security.core.userdetails.model.yml
@@ -3,5 +3,5 @@ extensions:
      pack: codeql/java-all
      extensible: sinkModel
    data:
-      - ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[0]", "credentials-username", "hq-generated"]
-      - ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[1]", "credentials-password", "hq-generated"]
+      - ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[0]", "credentials-username", "manual"]
+      - ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[1]", "credentials-password", "manual"]