Java: add extra known frameworks and sample negative samples to manage sarif file sizes

This commit is contained in:
Stephan Brandauer
2023-05-26 11:25:45 +02:00
parent 5ca2221097
commit a89378d86d
2 changed files with 4 additions and 0 deletions

View File

@@ -296,6 +296,9 @@ private class SkipFrameworkModeling extends CharacteristicsImpl::UninterestingTo
"java.%", //
"javax.%", //
"org.apache%", //
"org.eclipse%", //
"org.gradle%", //
"org.slf4j%", //
])
}
}

View File

@@ -17,6 +17,7 @@ from
ApplicationModeMetadataExtractor meta, string package, string type, boolean subtypes, string name,
string signature, string input
where
endpoint.getLocation().getStartLine() % 100 = 0 and
characteristic.appliesToEndpoint(endpoint) and
confidence >= SharedCharacteristics::highConfidence() and
characteristic.hasImplications(any(NegativeSinkType negative), true, confidence) and