diff --git a/ql/src/semmle/go/frameworks/SQL.qll b/ql/src/semmle/go/frameworks/SQL.qll index d338ddbcf57..ecb5becdfca 100644 --- a/ql/src/semmle/go/frameworks/SQL.qll +++ b/ql/src/semmle/go/frameworks/SQL.qll @@ -168,7 +168,8 @@ module SQL { meth.hasQualifiedName(package, "DB", name) and this = meth.getACall().getArgument(0) and package in ["github.com/jinzhu/gorm", "github.com/go-gorm/gorm", "gorm.io/gorm"] and - name in ["Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having", "Joins"] + name in ["Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having", + "Joins", "Exec", "Distinct", "Pluck"] ) } }