mirror of
https://github.com/github/codeql.git
synced 2026-07-16 08:48:17 +02:00
b6f1ddcdab
This will exclude the results of these queries from the summary tables produced by `codeql database analyze` in a future version of the CodeQL CLI.
23 lines
625 B
Plaintext
23 lines
625 B
Plaintext
/**
|
|
* @name Supported flow steps in external libraries
|
|
* @description A list of 3rd party APIs detected as flow steps. Excludes test and generated code.
|
|
* @kind metric
|
|
* @tags summary telemetry
|
|
* @id java/telemetry/supported-external-api-taint
|
|
*/
|
|
|
|
import java
|
|
import ExternalApi
|
|
import semmle.code.java.GeneratedFiles
|
|
|
|
from ExternalApi api, int usages
|
|
where
|
|
not api.isUninteresting() and
|
|
api.hasSummary() and
|
|
usages =
|
|
strictcount(Call c |
|
|
c.getCallee().getSourceDeclaration() = api and
|
|
not c.getFile() instanceof GeneratedFile
|
|
)
|
|
select api.getApiName() as apiname, usages order by usages desc
|