hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Consider ai-generated flow summaries to as generated summaries in dataflow.

Browse Source
This commit is contained in:
Michael Nebel
2023-02-20 12:11:48 +01:00
parent 54c0404110
commit 813ffa440c
11 changed files with 41 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/utils/modelconverter/ExtractNeutrals.ql
View File

@@ -10,5 +10,5 @@ import semmle.code.java.dataflow.ExternalFlow
from string package, string type, string name, string signature, string provenance
where
neutralModel(package, type, name, signature, provenance) and
provenance != "generated"
provenance != ["generated", "ai-generated"]
select package, type, name, signature, provenance order by package, type, name, signature

2
java/ql/src/utils/modelconverter/ExtractSinks.ql
View File

@@ -12,6 +12,6 @@ from
string input, string kind, string provenance
where
sinkModel(package, type, subtypes, name, signature, ext, input, kind, provenance) and
provenance != "generated"
provenance != ["generated", "ai-generated"]
select package, type, subtypes, name, signature, ext, input, kind, provenance order by
package, type, name, signature, input, kind

2
java/ql/src/utils/modelconverter/ExtractSources.ql
View File

@@ -12,6 +12,6 @@ from
string output, string kind, string provenance
where
sourceModel(package, type, subtypes, name, signature, ext, output, kind, provenance) and
provenance != "generated"
provenance != ["generated", "ai-generated"]
select package, type, subtypes, name, signature, ext, output, kind, provenance order by
package, type, name, signature, output, kind

2
java/ql/src/utils/modelconverter/ExtractSummaries.ql
View File

@@ -12,6 +12,6 @@ from
string input, string output, string kind, string provenance
where
summaryModel(package, type, subtypes, name, signature, ext, input, output, kind, provenance) and
provenance != "generated"
provenance != ["generated", "ai-generated"]
select package, type, subtypes, name, signature, ext, input, output, kind, provenance order by
package, type, name, signature, input, output, kind