From a89378d86d8ee2a143564bbc193e7da3ae304af9 Mon Sep 17 00:00:00 2001 From: Stephan Brandauer Date: Fri, 26 May 2023 11:25:45 +0200 Subject: [PATCH] Java: add extra known frameworks and sample negative samples to manage sarif file sizes --- .../src/Telemetry/AutomodelApplicationModeCharacteristics.qll | 3 +++ .../AutomodelApplicationModeExtractNegativeExamples.ql | 1 + 2 files changed, 4 insertions(+) diff --git a/java/ql/src/Telemetry/AutomodelApplicationModeCharacteristics.qll b/java/ql/src/Telemetry/AutomodelApplicationModeCharacteristics.qll index 138e508b1d2..785b56d31da 100644 --- a/java/ql/src/Telemetry/AutomodelApplicationModeCharacteristics.qll +++ b/java/ql/src/Telemetry/AutomodelApplicationModeCharacteristics.qll @@ -296,6 +296,9 @@ private class SkipFrameworkModeling extends CharacteristicsImpl::UninterestingTo "java.%", // "javax.%", // "org.apache%", // + "org.eclipse%", // + "org.gradle%", // + "org.slf4j%", // ]) } } diff --git a/java/ql/src/Telemetry/AutomodelApplicationModeExtractNegativeExamples.ql b/java/ql/src/Telemetry/AutomodelApplicationModeExtractNegativeExamples.ql index 5e12786e106..f57079aa57a 100644 --- a/java/ql/src/Telemetry/AutomodelApplicationModeExtractNegativeExamples.ql +++ b/java/ql/src/Telemetry/AutomodelApplicationModeExtractNegativeExamples.ql @@ -17,6 +17,7 @@ from ApplicationModeMetadataExtractor meta, string package, string type, boolean subtypes, string name, string signature, string input where + endpoint.getLocation().getStartLine() % 100 = 0 and characteristic.appliesToEndpoint(endpoint) and confidence >= SharedCharacteristics::highConfidence() and characteristic.hasImplications(any(NegativeSinkType negative), true, confidence) and