mirror of
https://github.com/github/codeql.git
synced 2026-03-01 21:34:50 +01:00
23 lines
601 B
Plaintext
23 lines
601 B
Plaintext
/**
|
|
* @name Supported sinks in external libraries
|
|
* @description A list of 3rd party APIs detected as sinks. Excludes test and generated code.
|
|
* @kind metric
|
|
* @tags summary
|
|
* @id java/telemetry/supported-external-api-sinks
|
|
*/
|
|
|
|
import java
|
|
import ExternalApi
|
|
import semmle.code.java.GeneratedFiles
|
|
|
|
from ExternalApi api, int usages
|
|
where
|
|
not api.isUninteresting() and
|
|
api.isSink() and
|
|
usages =
|
|
strictcount(Call c |
|
|
c.getCallee().getSourceDeclaration() = api and
|
|
not c.getFile() instanceof GeneratedFile
|
|
)
|
|
select api.getApiName() as apiname, usages order by usages desc
|